CVE-2020-15165

Critical

Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it's sources or permissions tampered by a malicious…

GitHub_M·CWE-506·Published 2020-08-28

CVSS

9.1

EPSS

0.01

KEV

Exploits

cve.orgen

317 chars

Version 1.1.6-free of Chameleon Mini Live Debugger on Google Play Store may have had it's sources or permissions tampered by a malicious actor. The official maintainer of the package is recommending all users upgrade to v1.1.8 as soon as possible. For more information, review the referenced GitHub Security Advisory.

NVDen

317 chars

NVDes

367 chars

La versión 1.1.6-free de Chameleon Mini Live Debugger en Google Play Store, puede haber tenido sus fuentes o permisos alterados por un actor malicioso. El mantenedor oficial del paquete esta recomendando a todos los usuarios que actualicen a la v1.1.8 tan pronto como sea posible. Para más información, revise el Aviso de Seguridad de GitHub al que se hace referencia

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	6.4	10.0	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N
3.1	Primary	cve.org	9.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
3.1	Primary	cve.org	9.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N
3.1	Primary	NVD	9.1	3.9	5.2	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
3.1	Secondary	NVD	9.3	2.8	5.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N