CVE-2021-43171

MEDIO 6.5CVE-2021-43171 · Published 22/08/2023 · updated 17/06/2026

In breve

CVE-2021-43171 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda app lounge (e.foundation).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.41%, superiore al 35.3% delle vulnerabilità.
Correzione: aggiornare a 0.19q o successiva.

Package	Affected versions	Patched versions
app lounge e.foundation	`< 0.19q`	`0.19q`

Description

Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user's systems by altering the server's API response.

References

gitlab.e.foundation/e/os/releases/-/releases/v0.19-q · Release Notes
nervuri.net/e/apps · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free