CVE-2023-22367

—

CVSS 3.1

5.9 medium

EPSS

<1%p42

Published

Feb 13, 2023 (Feb 13, 2023)

Modified

Jun 17, 2026

Description

Ichiran App for iOS versions prior to 3.1.0 and Ichiran App for Android versions prior to 3.1.0 improperly verify server certificates, which may allow a remote unauthenticated attacker to eavesdrop on an encrypted communication via a man-in-the-middle attack.

Vendors: ichiranusa
Products: ichiran
Weakness: CWE-295
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.