Critical OkCupid Flaw Exposed Daters to App Takeovers

🗓️ 14 Feb 2019 12:30:03Reported by Lindsey O'DonnellType

A critical flaw in the OkCupid app allows bad actors to steal credentials, launch man-in-the-middle attacks, compromise user's application, monitor usage, read messages, and track geographic location. Users should update the app immediately

Source	Link
threatpost	www.threatpost.com/exposed-instagram-okcupid-mumsnet-all-face-data-concerns/141688/
media	www.media.threatpost.com/wp-content/uploads/sites/103/2019/02/13125445/okcupid-2.png
media	www.media.threatpost.com/wp-content/uploads/sites/103/2019/02/13125326/okcupid-1.png
threatpost	www.threatpost.com/exposed-instagram-okcupid-mumsnet-all-face-data-concerns/141688/
threatpost	www.threatpost.com/hackers-breach-dunkin-donuts-accounts-in-credential-stuffing-attack/139472/
techcrunch	www.techcrunch.com/2019/02/10/okcupid-account-hacks/
threatpost	www.threatpost.com/app-flaws-allow-snoops-to-spy-on-tinder-users-researchers-say/129625/
us-cert	www.us-cert.gov/ncas/current-activity/2019/02/12/Internet-Romance-Scams
threatpost	www.threatpost.com/u-s-military-members-catfished-and-hooked-for-thousands-of-dollars/139569/

14 Feb 2019 12:30Current

6.8Medium risk

Vulners AI Score6.8