CVE-2021-43171
Last modified
CVE-2021-43171 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user's systems by altering the server's API response.. EPSS estimates a 0.32% chance of exploitation in the next 30 days.
Description
Improper verification of applications' cryptographic signatures in the /e/OS app store client App Lounge before 0.19q allows attackers in control of the application server to install malicious applications on user's systems by altering the server's API response.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| E.Foundation | App Lounge | < 0.19q |
References
- https://nervuri.net/e/appsThird Party Advisory
- https://nervuri.net/e/appsThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-43171?
How severe is CVE-2021-43171?
How do I fix CVE-2021-43171?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-43160A Remote Code Execution (RCE) vulnerability exists in Ruijie…8.8
- CVE-2021-43161A Remote Code Execution (RCE) vulnerability exists in Ruijie…8.8
- CVE-2021-43162A Remote Code Execution (RCE) vulnerability exists in Ruijie…8.8
- CVE-2021-43163A Remote Code Execution (RCE) vulnerability exists in Ruijie…9.8
- CVE-2021-43164A Remote Code Execution (RCE) vulnerability exists in Ruijie…8.8
- CVE-2021-4317Use after free in ANGLE in Google Chrome prior to 96.0.4664.…8.8
- CVE-2021-43172NLnet Labs Routinator prior to 0.10.2 happily processes a ch…7.5
- CVE-2021-43173In NLnet Labs Routinator prior to 0.10.2, a validation run c…7.5
- CVE-2021-43174NLnet Labs Routinator versions 0.9.0 up to and including 0.1…7.5
- CVE-2021-43175The GOautodial API prior to commit 3c3a979 made on October 1…7.5
- CVE-2021-43176The GOautodial API prior to commit 3c3a979 made on October 1…8.8
- CVE-2021-43177As a result of an incomplete fix for CVE-2015-7225, in versi…5.3
Are you affected by CVE-2021-43171?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST