medium5.3
CVE-2024-36277
Improper verification of cryptographic signature issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS.
Impact
Improper verification of cryptographic signature issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. The affected app cannot detect event data with invalid signatures.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://apps.apple.com/us/app/freefrom-the-nostr-client/id6446819930
- https://freefrom.space/
- https://jvn.jp/en/jp/JVN55045256/
- https://play.google.com/store/apps/details?id=com.freefrom
- https://apps.apple.com/us/app/freefrom-the-nostr-client/id6446819930
- https://freefrom.space/
- https://jvn.jp/en/jp/JVN55045256/
- https://play.google.com/store/apps/details?id=com.freefrom