What’s Vulnerable › Vulnerabilities
CVE-2024-53683: Ossur Mobile Logic Application Exposure of Sensitive System Information to an Unauthorized Control Sphere
- Severity: medium (CVSS 4.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-01-17 · updated 2026-06-17
- Weakness: CWE-497
Description
A valid set of credentials in a .js file and a static token for communication were obtained from the decompiled IPA. An attacker could use the information to disrupt normal use of the application by changing the translation files and thus weaken the integrity of normal use.
Affected products
- Ossur Mobile Logic Application: before 1.5.5 — fixed in 1.5.5
How to fix
Upgrade to a fixed version: Ossur Mobile Logic Application 1.5.5. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2024-53683 or the next vulnerability affects your stack