CVE-2023-52075
Last modified
CVE-2023-52075 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. EPSS estimates a 0.52% chance of exploitation in the next 30 days.
Description
ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all users using the API. It is recommended to implement proper error caching.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Revanced | Revanced | <= 2023-11-25 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-52075?
How severe is CVE-2023-52075?
How do I fix CVE-2023-52075?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-5207A vulnerability was discovered in GitLab CE and EE affecting…8.8
- CVE-2023-52070JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIn…8.4
- CVE-2023-52071Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2023-52072FlyCms v1.0 was discovered to contain a Cross-Site Request F…8.8
- CVE-2023-52073FlyCms v1.0 was discovered to contain a Cross-Site Request F…8.8
- CVE-2023-52074FlyCms v1.0 was discovered to contain a Cross-Site Request F…8.8
- CVE-2023-52076Atril Document Viewer is the default document reader of the …7.8
- CVE-2023-52077Nexkey is a lightweight fork of Misskey v12 optimized for sm…9.8
- CVE-2023-52079msgpackr is a fast MessagePack NodeJS/JavaScript implementat…6.5
- CVE-2023-52080IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow …7.7
- CVE-2023-52081ffcss is a CLI interface to apply and configure Firefox CSS …5.3
- CVE-2023-52082Lychee is a free photo-management tool. Prior to 5.0.2, Lyc…9.8
Are you affected by CVE-2023-52075?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST