PT-2023-21299 · Pikpak · Pikpak

Happy0717 · Published 2023-04-12 · Updated 2025-02-10 · CVE-2023-27703

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions pikpak version 1.29.2

Description The Android version of pikpak was discovered to contain an information leak via the debug interface.

Recommendations For pikpak version 1.29.2, consider disabling the debug interface as a temporary workaround until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2023-27703

Affected Products

Pikpak

References · 6

• 🔥 https://github.com/happy0717/CVE-2023-27703 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-27703 · Security Note
• https://osv.dev/vulnerability/CVE-2023-27703 · Vendor Advisory
• https://t.me/cvenotify/110609 · Telegram Post
• https://drive.google.com/drive/folders/1Szu9pjivVtG93ceECvnoAjeSABVyfDES?usp=sharing · Note
• https://t.me/cibsecurity/61974 · Telegram Post