CyberRota Analysis
AI-GeneratedThe vulnerability in the WARP-Clash-API affects the doUpdateLicenseKey function, leading to a race condition that can be exploited remotely, albeit with a high level of complexity. Organizations using unsupported versions of this API should prioritize addressing this issue, as the exploit has been made public and could pose a risk to their systems. Given the lack of vendor support and versioning information, immediate action is recommended to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. This affects the function doUpdateLicenseKey. The manipulation results in race condition. The attack can be launched remotely. The attack requires a high level of complexity. The exploitability is reported as difficult. The exploit has been made public and could be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.