9.8
CVE-2020-5800
- EPSS 0.44%
- Veröffentlicht 07.12.2020 13:15:11
- Zuletzt bearbeitet 21.11.2024 05:34:37
- Quelle vulnreport@tenable.com
- CVE-Watchlists
- Unerledigt
LoginThe Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Eat Spray Love Project ≫ Eat Spray Love Version2.0.20 SwPlatformandroid
Eat Spray Love Project ≫ Eat Spray Love Version2.0.20 SwPlatformiphone_os
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.44% | 0.604 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-669 Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.