CVE-2018-17402

The PhonePe wallet aka com.PhonePe.app application 3.0.6 through 3.3.26 for Android might allow attackers to discover the Credit/Debit card number, expiration date, and CVV number. NOTE: the vendor says that, to exploit this, the user has to explicitly install a malicious app and provide...

CVE-2018-17402

CVE-2018-17402 (PhonePe wallet) affects Android versions 3.0.6–3.3.26 of com.PhonePe.app. The issue is an information disclosure risk where an attacker could uncover credit/debit card number, expiry date, and CVV. The exploitation condition described across sources requires the user to install a ...