Security Advisory

CVE-2017-16905

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-01-05 08:00:00

Last updated 2024-08-05 20:35:21

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, and consequently achieve remote code execution, via a man-in-the-middle attack.

← Browse all CVEs View on cve.org ↗