CVE-2023-52075 - CVE House
Back to Database
Status published High CVE-2023-52075

ReVanced API vulnerable to Denial of Service due to lack of error caching

Vulnerability Description

ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bca9838fa3e7df20d2, ReVanced API lacks error caching causing rate limit to be triggered thus increasing server load. This causes a denial of service for all users using the API. It is recommended to implement proper error caching.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-52075

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

Affected Software

revanced-api
Vulnerable Versions:
<= 71f81f7f20cd26fd707335bca9838fa3e7df20d2

Timeline

Official Publish: December 27th, 2023
Last Modified: September 9th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-755

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1203 Exploitation for Client Execution
Execution
T1213 Data from Information Repositories
Collection
T1499 Endpoint Denial of Service
Impact