CVE-2017-13083

2017-10-1813:00:00

CWE-295

CWE-494

CWE-345

CWE-347

certcc

raw.githubusercontent.com

7.7 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.4%

JSON

Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily convince a user to execute arbitrary code