CVE-2024-13173 MEDIUM

CVE-2024-13173: Health information leakage vulnerability

Vendor Vivo
Product Health
Weakness CWE-306 · Missing auth
Published January 8, 2025
Last update January 8, 2025
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N

What the vulnerability does

01Description

The health module has insufficient restrictions on loading URLs, which may lead to some information leakage.

Key dates

02Disclosure timeline

January 8, 2025 CVE published
January 8, 2025 Record updated