Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-52075
HistoryDec 27, 2023 - 8:15 p.m.

CVE-2023-52075

2023-12-2720:15:19
CWE-755
[email protected]
web.nvd.nist.gov
3
revanced api
error caching
rate limit
server load
denial of service

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.0%

JSON

ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all users using the API. It is recommended to implement proper error caching.

Affected configurations

Nvd
Node
revancedrevancedRange≤2023-11-25
VendorProductVersionCPE
revancedrevanced*cpe:2.3:a:revanced:revanced:*:*:*:*:*:*:*:*

Related

cvelist 1
prion 1
vulnrichment 1
cve 1
cvelist
cvelist
CVE-2023-52075 ReVanced API vulnerable to Denial of Service due to lack of error caching
2023-12-27 19:49:39
prion
prion
Code injection
2023-12-27 20:15:00
vulnrichment
vulnrichment
CVE-2023-52075 ReVanced API vulnerable to Denial of Service due to lack of error caching
2023-12-27 19:49:39
cve
cve
CVE-2023-52075
2023-12-27 20:15:19

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

17.0%

JSON
Related for NVD:CVE-2023-52075
cvelist1prion1vulnrichment1cve1