CVE-2023-5079CWE-20

Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file downloads, which could result in information…

High · published November 8, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
49.4
In the wild
Unconfirmed
What it is

Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file downloads, which could result in information disclosure.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00626 · 49.4th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2023-11-08T22:03Z
EPSS history
Timeline
  • 08 NOV 22:03Z
    Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file downloads, which could result in information…
    cvelistv5