CVE-2017-16905

The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, and consequently…

published January 5, 2018

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, and consequently achieve remote code execution, via a man-in-the-middle attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03480 · 89.0th percentile
Published
2018-01-05T08:00Z
EPSS history
Timeline
  • 05 JAN 08:00Z
    The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, and consequently…
    cvelistv5