CVE-2023-5321

CVE-2023-5321 affects the Inure Android app (hamza417/inure). The connected Huntr entry describes an improper validation in TextViewerActivity: an exported activity accepts an intent with file:// URIs and text/* mime types, then opens files from the app’s private data directory. The root cause is...

CVE-2023-4877

CVE-2023-4877 concerns exposure of sensitive information to an unauthorized actor in the GitHub repository hamza417/inure prior to build92. The issue is documented across multiple sources (NVD, Red Hat, PT-Security, and vuln enrichment) and consistently describes an information disclosure vulnera...

CVE-2023-4434

CVE-2023-4434 refers to a missing authorization vulnerability in the Inure Android app (GitHub hamza417/inure) present in builds prior to build88. Red Hat and OSV/NVD entries corroborate the issue as ‘Missing Authorization in hamza417/inure prior to build88’. Technical detail from the Huntr entry...

CVE-2023-4876

CVE-2023-4876 affects hamza417/inure (prior to build92). The root cause is improper validation of incoming intent.data in TTFViewerActivity, allowing content:// data to be opened via the app’s file provider and leading to exposure of sensitive files stored in external storage (e.g., Preferences.x...

CVE-2023-4435

CVE-2023-4435 describes improper input validation in the GitHub repository hamza417/inure prior to build88. The consolidated data indicates this affects the Inure app (versions before build88) and could impact confidentiality (high) with a local attack vector and user interaction. A connected Hun...

CVE-2023-5862

CVE-2023-5862 concerns the Inure Android app (hamza417/inure) prior to Build95. The connected sources describe an improper authorization flaw in a GitHub repository that manifests as Missing Authorization in Inure, enabling an attacker-controlled file access path to open arbitrary files via an ex...