CVE-2021-41067

An issue was discovered in Listary through 6

published December 14, 2021

CVSS
—
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

An issue was discovered in Listary through 6. Improper implementation of the update process leads to the download of software updates with a /check-update HTTP-based connection. This can be exploited with MITM techniques. Together with the lack of package validation, it can lead to manipulation of update packages that can cause an installation of malicious content.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00578 · 46.8th percentile
Published
2021-12-14T15:31Z
EPSS history
Timeline
  • 14 DEC 15:31Z
    An issue was discovered in Listary through 6
    cvelistv5