Zalo
1 CVEs
product
Monthly
An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Zalo
NVD
GitHub
CVSS 3.1
7.5
EPSS
0.3%
EPSS 0%
CVSS 7.5
HIGH
POC
This Month
An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Information Disclosure
Zalo
NVD
GitHub