Zalo

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Zalo records in CISA KEV

No Zalo vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Zalo · all components

TI-2024-35781 CVE-2024-53359 · GHSA-h272-rm32-wwcr

LOW 33

An issue in Zalo v23.09.01 allows attackers to obtain sensitive user information via a crafted GET request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00477 Published 2025-05-20 No fix listed CWE-200