CVE-2021-33840 | BDVDB-2026-154749 Detail

Description#

The server in Luca through 1.1.14 allows remote attackers to cause a denial of service (insertion of many fake records related to COVID-19) because Phone Number data lacks a digital signature.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://luca-app.de/securityoverview/processes/guest_registration.html#verifying-the-contact-data
https://gitlab.com/lucaapp/web/-/issues/1#note_560963608

Exploit#

No public exploit known

History#

Version 12021-06-03Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.