CVE-2023-24069

Description from NVD

Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to obtain potentially sensitive attachments sent in messages from the attachments.noindex directory. Cached attachments are not effectively cleared. In some cases, even after a self-initiated file deletion, an attacker can still recover the file if it was previously replied to in a conversation. (Local filesystem access is needed by the attacker.)

Information Acquisition Date:2023-01-25T23:54Z

CVSS 2.0: 0.0 None CVSS 3.x: 0.0 None

NVD References

https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069/
source:MISC
tags:

https://signal.org/en/download/windows
source:MISC
tags:

https://signal.org/download/linux
source:MISC
tags:

https://signal.org/download/macos
source:MISC
tags:

Refer to Information on External Sites

CVE Infomation	Exploits or more Infomation
mitre	EXPLOIT DATABASE
NVD	0day.today
vulmon.com	github
CVE Details	Twitter
JVN ENG JPN
Reconshell

Software Tag: Exchange(1 tweets) Linux(7 tweets) Windows(7 tweets)

List of frequently cited URLs

URL	Num of Times Referred to
https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	26

▼ Show Information from Twitter(59)

User	URL	Info Source	Date
johnjhacking	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source johnjhacking 1617403651605295105	2023/01/23
CVEreport	https://cve.report/CVE-2023-24069	Source CVEreport 1617418354456682496	2023/01/23
threatintelctr	https://nvd.nist.gov/vuln/detail/CVE-2023-24069	Source threatintelctr 1617423610569793538	2023/01/23
CVEnew	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24069	Source CVEnew 1617428250577223680	2023/01/23
eyeTSystems	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24069	Source eyeTSystems 1617439427915128833	2023/01/23
clement_michel	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source clement_michel 1617469733774962688	2023/01/23
vomanc	https://twitter.com/vomanc/status/1617473073816420353/photo/1	Source vomanc 1617473073816420353	2023/01/23
bytecodevm	https://movaxbx.ru/2023/01/23/cve-2023-24068-cve-2023-24069...	Source bytecodevm 1617480644300349440	2023/01/23
WolfgangSesin	http://www.sesin.at	Source WolfgangSesin 1617481055677698050	2023/01/23
WolfgangSesin	https://www.sesin.at/2023/01/23/cve-2023-24069	Source WolfgangSesin 1617481055677698050	2023/01/23
www_sesin_at	http://www.sesin.at	Source www_sesin_at 1617481057598685184	2023/01/23
www_sesin_at	https://www.sesin.at/2023/01/23/cve-2023-24069	Source www_sesin_at 1617481057598685184	2023/01/23
SeriousHoax	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source SeriousHoax 1617482234335997954	2023/01/23
VulmonFeeds	http://vulmon.com/vulnerabilitydetails?qid=CVE-2023-24069	Source VulmonFeeds 1617486376286535681	2023/01/23
WolfgangSesin	http://www.sesin.at	Source WolfgangSesin 1617488661641142272	2023/01/23
WolfgangSesin	https://www.sesin.at/2023/01/23/cve-2023-24069-signal-deskt...	Source WolfgangSesin 1617488661641142272	2023/01/23
www_sesin_at	http://www.sesin.at	Source www_sesin_at 1617488663700447232	2023/01/23
www_sesin_at	https://www.sesin.at/2023/01/23/cve-2023-24069-signal-deskt...	Source www_sesin_at 1617488663700447232	2023/01/23
just4trip	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source just4trip 1617489561331941377	2023/01/23
threatmeter	https://ift.tt/zexg2vq	Source threatmeter 1617505200650027009	2023/01/23
vulnonym	None	Source vulnonym 1617513184558022660	2023/01/23
davidscottworks	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source davidscottworks 1617523635220283395	2023/01/23
cyb3113	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source cyb3113 1617548374336573440	2023/01/24
mindcrypt	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source mindcrypt 1617549420299444226	2023/01/24
MariaRusanova88	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source MariaRusanova88 1617560704004898820	2023/01/24
Zeecka_	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source Zeecka_ 1617561310920679425	2023/01/24
tony_hunt	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source tony_hunt 1617632668333768704	2023/01/24
ptracesecurity	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source ptracesecurity 1617688697838649344	2023/01/24
ptracesecurity	https://twitter.com/ptracesecurity/status/16176886978386493...	Source ptracesecurity 1617688697838649344	2023/01/24
ColorTokensInc	https://xcloud.spectrum.colortokens.com/cve/CVE-2023-24069	Source ColorTokensInc 1617688728368971778	2023/01/24
fida	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source fida 1617754938880450565	2023/01/24
ipssignatures	https://twitter.com/search?src=sprv&q=CVE-2023-24069	Source ipssignatures 1617765141885460481	2023/01/24
ipssignatures	https://twitter.com/ptracesecurity/status/1617688697838649344	Source ipssignatures 1617765142900400128	2023/01/24
s3xcur1ty	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source s3xcur1ty 1617773384804319235	2023/01/24
kgolubic	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source kgolubic 1617789584859103232	2023/01/24
mstfknn	https://infosecwriteups.com/signal-client-v6-2-and-earlier-...	Source mstfknn 1617811204885602305	2023/01/24
PentestingN	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source PentestingN 1617812481165955072	2023/01/24
PentestingN	https://infosecwriteups.com/signal-client-v6-2-and-earlier-...	Source PentestingN 1617836837812293639	2023/01/24
mcomtz	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source mcomtz 1617871092483522560	2023/01/24
threatable	https://www.threatable.io	Source threatable 1617873713591975938	2023/01/24
threatable	https://infosecwriteups.com/signal-client-v6-2-and-earlier-...	Source threatable 1617873713591975938	2023/01/24
l3dlp	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source l3dlp 1617880000396668929	2023/01/24
VadorBeltran	https://infosecwriteups.com/signal-client-v6-2-and-earlier-...	Source VadorBeltran 1617894960136880129	2023/01/24
ipssignatures	https://twitter.com/ptracesecurity/status/1617688697838649344	Source ipssignatures 1617916643849506817	2023/01/25
balkLana	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source balkLana 1617926543682199552	2023/01/25
mhatta	https://buff.ly/3kHglfV	Source mhatta 1617947845029466122	2023/01/25
blipmeapp	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source blipmeapp 1617991685476331523	2023/01/25
omvapt	https://vapt.me/SignalVuln	Source omvapt 1618014445178855426	2023/01/25
AlgoDumps	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source AlgoDumps 1618061667870597120	2023/01/25
speedealz	https://o.wzm.me/river/v/172312	Source speedealz 1618276905207140356	2023/01/26
speedealz	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source speedealz 1618276905207140356	2023/01/26
XaqFixx	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source XaqFixx 1618300780192366592	2023/01/26
two_minwarning	https://ift.tt/8DfNWjc	Source two_minwarning 1618318469228814359	2023/01/26
JStyles312	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069...	Source JStyles312 1618348549573607424	2023/01/26
johnjhacking	https://infosecwriteups.com/signal-client-v6-2-and-earlier-...	Source johnjhacking 1618613567275806721	2023/01/26
WZorNET	https://twitter.com/WZorNET/status/1618620570425528325/photo/1	Source WZorNET 1618620570425528325	2023/01/26
akaclandestine	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source akaclandestine 1618643786388627457	2023/01/27
bashgrylls	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source bashgrylls 1618653291457703936	2023/01/27
richardmagalad	https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069	Source richardmagalad 1618816526714564608	2023/01/27

List of frequently cited URLs

URL	Num of Times Referred to
johnjhacking.com	26

▼ Show Information from Twitter(59)

User	URL	Info Source
johnjhacking	johnjhacking.com	Show Tweet
CVEreport	cve.report	Show Tweet
threatintelctr	nvd.nist.gov	Show Tweet
CVEnew	cve.mitre.org	Show Tweet
eyeTSystems	cve.mitre.org	Show Tweet
clement_michel	johnjhacking.com	Show Tweet
vomanc	twitter.com	Show Tweet
bytecodevm	movaxbx.ru	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
SeriousHoax	johnjhacking.com	Show Tweet
VulmonFeeds	vulmon.com	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
WolfgangSesin	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
www_sesin_at	sesin.at	Show Tweet
just4trip	johnjhacking.com	Show Tweet
threatmeter	ift.tt	Show Tweet
vulnonym		Show Tweet
davidscottworks	johnjhacking.com	Show Tweet
cyb3113	johnjhacking.com	Show Tweet
mindcrypt	johnjhacking.com	Show Tweet
MariaRusanova88	johnjhacking.com	Show Tweet
Zeecka_	johnjhacking.com	Show Tweet
tony_hunt	johnjhacking.com	Show Tweet
ptracesecurity	johnjhacking.com	Show Tweet
ptracesecurity	twitter.com	Show Tweet
ColorTokensInc	xcloud.spectrum.colortokens.com	Show Tweet
fida	johnjhacking.com	Show Tweet
ipssignatures	twitter.com	Show Tweet
ipssignatures	twitter.com	Show Tweet
s3xcur1ty	johnjhacking.com	Show Tweet
kgolubic	johnjhacking.com	Show Tweet
mstfknn	infosecwriteups.com	Show Tweet
PentestingN	johnjhacking.com	Show Tweet
PentestingN	infosecwriteups.com	Show Tweet
mcomtz	johnjhacking.com	Show Tweet
threatable	threatable.io	Show Tweet
threatable	infosecwriteups.com	Show Tweet
l3dlp	johnjhacking.com	Show Tweet
VadorBeltran	infosecwriteups.com	Show Tweet
ipssignatures	twitter.com	Show Tweet
balkLana	johnjhacking.com	Show Tweet
mhatta	buff.ly	Show Tweet
blipmeapp	johnjhacking.com	Show Tweet
omvapt	vapt.me	Show Tweet
AlgoDumps	johnjhacking.com	Show Tweet
speedealz	o.wzm.me	Show Tweet
speedealz	johnjhacking.com	Show Tweet
XaqFixx	johnjhacking.com	Show Tweet
two_minwarning	ift.tt	Show Tweet
JStyles312	johnjhacking.com	Show Tweet
johnjhacking	infosecwriteups.com	Show Tweet
WZorNET	twitter.com	Show Tweet
akaclandestine	johnjhacking.com	Show Tweet
bashgrylls	johnjhacking.com	Show Tweet
richardmagalad	johnjhacking.com	Show Tweet

GitHub Search Results: Up to 10

Name	URL
Live-Hack-CVE/CVE-2023-24069	https://github.com/Live-Hack-CVE/CVE-2023-24069

GitHub Search Results: Up to 10

Name	URL
Live-Hack-CVE/CVE-2023-24069	github.com

2023/01/27 Score : 0
Added Har-sia Database : 2023/01/23
Last Modified : 2023/01/27
Highest Scored Date : 2023/01/24
Highest Score : 20