What’s Vulnerable › Vulnerabilities

CVE-2019-13097

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-07-22 · updated 2026-06-17
• Weakness: CWE-20

Description

The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can manipulate users' score parameters exchanged between client and server.

Affected products

• Cat Runner: Decorate Home Project Cat Runner: Decorate Home: 2.8.0

References

• https://pastebin.com/WkkGk0tw
• https://www.youtube.com/watch?v=u5iEeLZnYVg
• https://pastebin.com/WkkGk0tw
• https://www.youtube.com/watch?v=u5iEeLZnYVg

Get alerted when CVE-2019-13097 or the next vulnerability affects your stack