CVE-2024-7697

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Logical vulnerability in the mobile application (com.transsion.carlcare) may lead to user information leakage risks.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-359CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Aug 12, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-76985.7A low privileged remote attacker can get access to CSRF tokens of higher privileged users which can be abused to mount CSRF attacks.CVE-2024-76998.8An low privileged remote attacker can execute OS commands with root privileges due to improper neutralization of special elements in user daCVE-2024-77006.5A command injection flaw was found in the "Host Init Config" template in the Foreman application via the "Install Packages" field on the "ReCVE-2024-77017.5Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.This isCVE-2024-77027.2The Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder plugin for WordPCVE-2024-77036.4The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to StoreCVE-2024-77047.5A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file /cloudstoCVE-2024-77055.3A vulnerability was found in Fujian mwcms 1.0.0. It has been declared as critical. Affected by this vulnerability is the function uploadeditCVE-2024-77062.7A vulnerability was found in Fujian mwcms 1.0.0. It has been rated as critical. Affected by this issue is the function uploadimage of the fiCVE-2024-77079.8A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilterCVE-2024-77087.5For requests that have a body, but reading the body may end up in reading 0 bytes, there is a buffer leak. This is particularly the case forCVE-2024-77094.3A vulnerability, which was classified as problematic, has been found in OcoMon 4.0RC1/4.0/5.0RC1. This issue affects some unknown processing
CVE-2024-7697: High severity, CVSS 7.5 | Vulnix