Sql injection

2020-05-2014:15:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.1%

JSON

Signal Private Messenger Android v4.59.0 and up and iOS v3.8.1.5 and up allows a remote non-contact to ring a victim’s Signal phone and disclose currently used DNS server due to ICE Candidate handling before call is answered or declined.

CPENameOperatorVersion
private_messengerle4.59.0
signalle3.8.1.5

CPE	Name	Operator	Version
	private_messenger	le	4.59.0
	signal	le	3.8.1.5

References

www.tenable.com/security/research/tra-2020-33