What’s Vulnerable › Vulnerabilities

CVE-2023-40735: Butterfly Button Project - Sensitive Information Disclosure

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-21 · updated 2026-06-17
• Weakness: CWE-200

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cavo – Connecting for a Safer World BUTTERFLY BUTTON (Architecture flaw) allows loss of plausible deniability and confidentiality.This issue affects BUTTERFLY BUTTON: As of 2023-08-21.

Affected products

• Cavo – Connecting for a Safer World BUTTERFLY BUTTON: through 2023-08-21

References

• https://butterfly-button.web.app/
• https://github.com/TheButterflyButton
• https://github.com/TheButterflySDK
• https://github.com/VULSecLabs/Vulnerabilities/blob/main/CVE/CVE-2023-40735.md
• https://www.butterfly-button.com/
• https://www.vulsec.org/advisories
• https://butterfly-button.web.app/
• https://github.com/TheButterflyButton
• https://github.com/TheButterflySDK
• https://github.com/VULSecLabs/Vulnerabilities/blob/main/CVE/CVE-2023-40735.md
• https://www.butterfly-button.com/
• https://www.vulsec.org/advisories

Get alerted when CVE-2023-40735 or the next vulnerability affects your stack