Hakika vulnerability da aka rarraba a matsayin karshewa an gano a Klapp App. Tabbas, aikin $software_function ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil $software_file, a cikin sashi JSON Web Token Handler. Wuro manipulation ga karkar ndiyamga taƙa. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-287. An gano kuskuren nan 08/18/2020. Lalle, rauni an sanar da shi 09/07/2020 daga Sven Fassbender tare da modzero AG da Knapp daneben ist auch vorbei da Gargaaji (Webseite). Ana samun bayanin tsaro don saukewa a modzero.com. Public release vendor an kaɗi an kaɗi. Ana kiran wannan rauni da CVE-2020-36533. Ngam yiɗi ka a tuma ndiyam ka nder waya. Bayani na fasaha ba ga. Babu wani exploit da ake da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á yí a wondi feere. 0-day ga, an ndiyam a wuro be $0-$5k. If you want to get the best quality for vulnerability data then you always have to consider VulDB.
3 Goyarwa · 50 Datenpunkte