Lucene search

CVE-2017-16905

🗓️ 05 Jan 2018 08:00:00Reported by mitreType

The DuoLingo TinyCards Android app (before 1.0) uses unencrypted HTTP, allowing remote attackers to spoof content and achieve remote code execution

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2017-16905	5 Jan 201808:29	–	cve
Prion	Remote code execution	5 Jan 201808:29	–	prion
Hacker One	Duolingo: RCE in TinyCards for Android	22 Oct 201703:08	–	hackerone
NVD	CVE-2017-16905	5 Jan 201808:29	–	nvd

Source	Link
wwws	www.wwws.nightwatchcybersecurity.com/2018/01/04/rce-in-duolingos-tinycards-app-for-android-cve-2017-16905/
hackerone	www.hackerone.com/reports/281605

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Jan 2018 08:00Current

8.1High risk

Vulners AI Score8.1

EPSS0.02113