CVE-2020-5800

Опубликовано: 07 дек. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to.

Ссылки

https://www.tenable.com/security/research/tra-2020-65
Exploit
Third Party Advisory
https://www.tenable.com/security/research/tra-2020-65
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:eat_spray_love_project:eat_spray_love:2.0.20:*:*:*:*:android:*:*

cpe:2.3:a:eat_spray_love_project:eat_spray_love:2.0.20:*:*:*:*:iphone_os:*:*

EPSS

Процентиль: 63%

0.00444

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-669

Связанные уязвимости

GHSA-2vq4-6g9q-2xjq

github

больше 3 лет назад