CVE-2021-33839

ALTO 7.5CVE-2021-33839 · Published 04/06/2021 · updated 17/06/2026

In breve

CVE-2021-33839 è una vulnerabilità ALTO (CVSS 7.5) che riguarda luca (luca-app).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.8%, superiore al 86.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
luca luca-app	`≤ 1.7.4`	No fix yet

Description

Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because the QR code of a Public Location can be intentionally confused with the QR code of a Private Meeting.

References

mame82/misc · Third Party Advisory
luca-app.de/securityoverview/properties/objectives.html · Vendor Advisory
twitter.com/patrick_hennig/status/1387738281757061125 · Third Party Advisory
youtu.be/jWyDfEB0m08 · Exploit

Altre vulnerabilità di luca

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free