CVE-2024-53683

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-497

Affected software

No affected versions have been published.

Timeline

Published
Jan 17, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-536848.8A cross-site request forgery (csrf) vulnerability exists in the WEBVIEW-M functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crCVE-2024-536855.5In the Linux kernel, the following vulnerability has been resolved: ceph: give up on paths longer than PATH_MAX If the full path to be buiCVE-2024-536875.5In the Linux kernel, the following vulnerability has been resolved: riscv: Fix IPIs usage in kfence_protect_page() flush_tlb_kernel_range(CVE-2024-536887.2Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in AE1021 firmware versions 2.0.10 aCVE-2024-53696.1A vulnerability was found in Kashipara College Management System 1.0. It has been declared as problematic. Affected by this vulnerability isCVE-2024-536905.5In the Linux kernel, the following vulnerability has been resolved: nilfs2: prevent use of deleted inode syzbot reported a WARNING in nilfCVE-2024-536918.8A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allCVE-2024-536924.7A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could CVE-2024-536937.1An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versCVE-2024-536948.6A time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect several product versions. If exploited, the vuCVE-2024-536959.1A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attCVE-2024-536964.9A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow rem
CVE-2024-53683: Medium severity, CVSS 4.4 | Vulnix