Vulnerability Description
ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all users using the API. It is recommended to implement proper error caching.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Revanced | Revanced | <= 2023-11-25 |
Related Weaknesses (CWE)
References
- https://github.com/ReVanced/revanced-api/security/advisories/GHSA-852x-grxp-8p3qVendor Advisory
- https://github.com/ReVanced/revanced-api/security/advisories/GHSA-852x-grxp-8p3qVendor Advisory
FAQ
What is CVE-2023-52075?
CVE-2023-52075 is a vulnerability with a CVSS score of 7.5 (HIGH). ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing r...
How severe is CVE-2023-52075?
CVE-2023-52075 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-52075?
Check the references section above for vendor advisories and patch information. Affected products include: Revanced Revanced.