Information disclosure due to an insecure hostname validation in the RYDE application 5.8.43 for Android and iOS allows attackers to take over an account via a deep link.
References
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 03:53
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2023-01-06 04:15
Updated : 2024-02-28 19:51
NVD link : CVE-2022-42979
Mitre link : CVE-2022-42979
CVE.ORG link : CVE-2022-42979
JSON object : View
Products Affected
rydesharing
- ryde
CWE
CWE-295
Improper Certificate Validation