Approved changes feed: RSS · Atom

cpe:2.3:a:luca-app:luca:*:*:*:*:*:android:*:*

part: a version: * update: *

VendorLuca App (3cd0b114-69f6-5c2f-a0e8-f2956ab22f3f)
ProductLuca (61a3a6a3-ee05-592e-8e8e-a7acc9dddc38)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mame82/misc purl2cpe 2026-06-01 10:13:08.813719

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-33840 vulnerable 2026-06-08 05:32:12.536044 Details available
The server in Luca through 1.1.14 allows remote attackers to cause a denial of service (insertion of many fake records related to COVID-19) because Phone Number data lacks a digital signature.
Published: 2021-06-03T23:57:32.000Z
Updated: 2024-08-03T23:58:23.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33839 vulnerable 2026-06-08 05:32:12.535726 Details available
Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because the QR code of a Public Location can be intentionally confused with the QR code of a Private Meeting.
Published: 2021-06-03T23:58:01.000Z
Updated: 2024-08-03T23:58:23.171Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-33838 vulnerable 2026-06-08 05:32:12.535293 Details available
Luca through 1.7.4 on Android allows remote attackers to obtain sensitive information about COVID-19 tracking because requests related to Check-In State occur shortly after requests for Phone Number Registration.
Published: 2021-06-03T23:58:25.000Z
Updated: 2024-08-03T23:58:23.220Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.