What is GHSA-mf96-wwv9-c857?

GHSA-mf96-wwv9-c857 is a security advisory published by GitHub Security Advisories with High severity. Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is...

Which CVE IDs does GHSA-mf96-wwv9-c857 cover?

GHSA-mf96-wwv9-c857 covers the following CVE IDs: CVE-2020-25493. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mf96-wwv9-c857?

GHSA-mf96-wwv9-c857 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

GHSA-mf96-wwv9-c857HighCVSS 7.5

Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2020-25493 →

📋 Description

Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic. The content of HTTP payload is encrypted using XOR with a hardcoded key, which allows for the possibility to decode the traffic.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-25493
https://github.com/c3r34lk1ll3r/decrypt-oclean-traffic
https://play.google.com/store/apps/details?id=com.yunding.noopsychebrushforeign
http://oclean.com
https://github.com/advisories/GHSA-mf96-wwv9-c857