PT-2023-31911 · Unknown · Revanced Api

Validcube · Publicado 2023-12-27 · Atualizado 2024-01-04 · CVE-2023-52075

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ReVanced API versions up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2

Description The ReVanced API proxies requests to feed the ReVanced Manager and website with data. However, it lacks error caching, causing the rate limit to be triggered and increasing server load. This results in a denial of service for all users using the API.

Recommendations Implement proper error caching to prevent the rate limit from being triggered and to reduce server load. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Handling of Exceptional Conditions

Enumeração de Fraquezas

CWE-755

Identificadores relacionados

CVE-2023-52075

GHSA-852X-GRXP-8P3Q

Produtos afetados

Revanced Api

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52075.json · Exploit
• https://github.com/ReVanced/revanced-api/security/advisories/GHSA-852x-grxp-8p3q · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-52075 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1740124036632371532 · Publicação no Twitter
• https://twitter.com/RedPacketSec/status/1740674629839065348 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-52075 · Nota de Segurança
• https://twitter.com/CVEnew/status/1740104402726244660 · Publicação no Twitter
• https://t.me/cvenotify/65274 · Publicação no Telegram