CVE-2021-43171

2023-08-2219:16:21

Google

osv.dev

cve-2021-43171

cryptographic signatures

/e/os app store

app lounge

malicious applications

api response

application server

7.1 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.0%

JSON

Improper verification of applications’ cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user’s systems by altering the server’s API response.

CPENameOperatorVersion
releaseseq0.14.1-q
releaseseq0.18.1-r
releaseseq0.9-pie
releaseseq0.14-q
releaseseq0.17-q
releaseseq0.12-q
releaseseq0.18.1-q
releaseseq0.15-q
releaseseq0.9.0-pie
releaseseq0.12.1-q

Name	Operator	Version
releases	eq	0.14.1-q
releases	eq	0.18.1-r
releases	eq	0.9-pie
releases	eq	0.14-q
releases	eq	0.17-q
releases	eq	0.12-q
releases	eq	0.18.1-q
releases	eq	0.15-q
releases	eq	0.9.0-pie
releases	eq	0.12.1-q