PT-2024-29659 · Unknown · Pheonix App

Akshudev · Published 2024-07-31 · Updated 2024-08-01 · CVE-2024-41951

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Pheonix App versions prior to 0.2.4 Pheonix App versions prior to 0.2.5

Description The issue is related to the map of encoding/decoding languages being visible in the code, which can have a moderate impact, particularly for users who want to secure their code, files, etc.

Recommendations For versions prior to 0.2.4, upgrade to version 0.2.4 or later to resolve the issue. For versions prior to 0.2.5, upgrade to version 0.2.5 and run the post install.py file inside the Scripts folder after downloading from pip. As a temporary workaround for versions that cannot be upgraded, consider modifying the code to hide the map of encoding/decoding languages, but be aware that this can lead to more issues.

Exploit

Fix

Weakness Enumeration

CWE-323

Related Identifiers

CVE-2024-41951

GHSA-258H-F687-4226

Affected Products

Pheonix App

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41951.json · Exploit
• https://osv.dev/vulnerability/CVE-2024-41951 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41951 · Security Note
• https://osv.dev/vulnerability/GHSA-258h-f687-4226 · Vendor Advisory
• https://github.com/AkshuDev/PheonixAppAPI · Note
• https://github.com/AkshuDev/PheonixAppAPI/security/advisories/GHSA-258h-f687-4226 · Note
• https://github.com/AkshuDev/PheonixAppAPI/commit/0937419e323f5ea9013d43dc1b82fef9d7e05044 · Note
• https://t.me/cvedetector/2171 · Telegram Post