Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Meesho Online Shopping App com.meesho.supply endpoint risky encryption
Vulnerability Description
A vulnerability has been found in Meesho Online Shopping App up to 27.3 on Android. Affected is an unknown function of the file /api/endpoint of the component com.meesho.supply. Such manipulation leads to risky cryptographic algorithm. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
使用已被攻破或存在风险的密码学算法
Vulnerability Title
Meesho Online Shopping 加密问题漏洞
Vulnerability Description
Meesho Online Shopping是Meesho公司的一个电商系统。 Meesho Online Shopping 27.3及之前版本存在加密问题漏洞,该漏洞源于对文件/api/endpoint的错误操作,可能导致使用有风险的加密算法。
CVSS Information
N/A
Vulnerability Type
N/A