Design/Logic Flaw

2023-05-3100:15:00

PRIOn knowledge base

www.prio-n.com

bestweather

android

unauthorized apps

denial of service

database manipulation

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.4%

JSON

An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a persistent denial of service attack by manipulating the database.

CPENameOperatorVersion
bestweathereq7.3.1

CPE	Name	Operator	Version
	bestweather	eq	7.3.1

References

www.zmtqsh.com/

github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29745/CVE%20detail.md

play.google.com/store/apps/details?id=com.icoolme.android.weather

play.google.com/store/apps/details?id=com.TheThaiger.android