CVE-2021-43171

2023-08-2200:00:00

mitre

www.cve.org

cve-2021-43171

cryptographic signatures

e/os app lounge

malicious applications

api response

application server

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.0%

JSON

Improper verification of applications’ cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user’s systems by altering the server’s API response.