{"id":"CVE-2023-4876","summary":"Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure","details":"Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92.","modified":"2026-08-12T03:51:48.770669039Z","published":"2023-09-10T00:00:19.240Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4876.json","cna_assigner":"@huntrdev","cwe_ids":["CWE-200"]},"references":[{"type":"WEB","url":"https://huntr.dev/bounties/f729d2c8-a62e-4f30-ac24-e187b0a7892a"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/4xxx/CVE-2023-4876.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4876"},{"type":"FIX","url":"https://github.com/hamza417/inure/commit/7db5511753089c3cf477475f1f3b62a6e6ede4a8"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/hamza417/inure","events":[{"introduced":"0"},{"fixed":"c5ec57a989c124a5a9c49423fa2485c947dbd8bb"},{"fixed":"7db5511753089c3cf477475f1f3b62a6e6ede4a8"}],"database_specific":{"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:hamza417:inure:*:*:*:*:*:android:*:*","extracted_events":[{"introduced":"0"},{"fixed":"build92"}]}}],"versions":["build91","build89","build88","build87","build86","build85","build83","build80","build79","build78","build77","build76","build75","build74","build73","build72","build71","build70","build69","build67","build68","build66","build65","build64","build63","build62","build61","build60","build59","build58","build57","build56","build55","Build53","Build52","Build51","Build50","build49","build48","build47","Build46","build45","Build45","build44"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-4876.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N"}]}