CVE-2019-13097

7.5 highEPSS 1.4%

The application API of Cat Runner Decorate Home version 2.8.0 for Android does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable. Attackers can manipulate users' score parameters exchanged between client and server.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2019-07-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cat_runner\:_decorate_home_project

References

https://pastebin.com/WkkGk0tw
https://www.youtube.com/watch?v=u5iEeLZnYVg
https://pastebin.com/WkkGk0tw
https://www.youtube.com/watch?v=u5iEeLZnYVg

Check your stack JSON