Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-38302

EPSS 0.12% · P31
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-38302

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A certain software build for the Sharp Rouvo V device (SHARP/VZW_STTM21VAPP/STTM21VAPP:12/SP1A.210812.016/1KN0_0_530:user/release-keys) leaks the Wi-Fi MAC address and the Bluetooth MAC address to system properties that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from directly obtaining non-resettable device identifiers in Android 10 and higher, but in this instance they are leaked by a high-privilege process and can be obtained indirectly. This malicious app reads from the "ro.boot.wifi_mac" system property to indirectly obtain the Wi-Fi MAC address and reads the "ro.boot.bt_mac" system property to obtain the Bluetooth MAC address.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
flask-cors 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Flask-CORS是Flask的跨源资源共享组件。 flask-cors 存在安全漏洞，该漏洞源于日志输出中和不当，允许攻击者破坏日志文件，可能掩盖其他攻击的踪迹、混淆日志处理工具以及伪造日志条目。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2023-38302

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-38302

请登录查看更多情报信息。

Same Patch Batch · n/a · 2024-04-22 · 44 CVEs total

CVE-2023-38301vendor.gsm.serial 安全漏洞
CVE-2023-38290com.evenwell.fqc 安全漏洞
CVE-2023-38300Verizon Orbic Maui 安全漏洞
CVE-2023-38296TCL 安全漏洞
CVE-2023-38295Tcl 安全漏洞
CVE-2023-38294Itel Vision 3 Turbo 安全漏洞
CVE-2023-38291TCL 20XE和TCL 10L 安全漏洞
CVE-2023-38292TCL 20XE 安全漏洞
CVE-2023-38298TCL 安全漏洞
CVE-2023-38293Nokia C100 安全漏洞
CVE-2023-38299多款产品 安全漏洞
CVE-2022-34561phpFox 跨站脚本漏洞
CVE-2022-34560phpFox 安全漏洞
CVE-2022-34562phpFox 跨站脚本漏洞
CVE-2022-46897编号已被CVE保留
CVE-2022-35503Open Source MANO 安全漏洞
CVE-2024-27574Trainme Academy 安全漏洞
CVE-2024-29661Desdev DedeCMS 安全漏洞
CVE-2024-29368moziloCMS 安全漏洞
CVE-2024-29376Sylius 安全漏洞

Showing top 20 of 44 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2023-38302

No comments yet

Leave a comment