CVE-2024-31343

CVSS 3.1 Score 7.5 of 10 (high)

Attack Complexity low
Confidentiality high
Integrity none
Availability none
Scope unchanged
Privileges Required none

Details

Published Apr 10, 2024
CWE ID 862

Summary

CVE-2024-31343 is a Missing Authorization vulnerability that has been identified in the Sonaar Music MP3 Audio Player for Music, Radio & Podcast. This issue allows unauthorized access to certain functionalities or data within the affected application. The vulnerability affects versions of the MP3 Audio Player for Music, Radio & Podcast by Sonaar ranging from n/a to 4.10.1. Successful exploitation of this vulnerability could lead to potential security risks, such as unintended data exposure or unauthorized modifications. Users are advised to update to the latest version of the software to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share