CVE-2020-1890CWE-20

A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a…

published September 3, 2020

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malformed data to load an image from a sender-controlled URL without user interaction.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01184 · 67.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-09-03T21:10Z
EPSS history
Timeline
  • 03 SEP 21:10Z
    A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a…
    cvelistv5