CVE-2020-5800

The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they…

published December 7, 2020

CVSS
—
EPSS
2%
Percentile
75.3
In the wild
Unconfirmed
What it is

⚠️ A sneaky flaw in the Eat Spray Love app lets users skip authentication altogether! One clever trick is all it takes to grab or change sensitive information. 🔥 Think of it like a restaurant where the kitchen staff don’t check IDs. Anyone could walk in, don an apron, and start changing the menu without anyone batting an eye! This oversight could allow malicious users to access personal information or even alter app data, potentially leading to user data breaches or unwanted changes. Imagine the chaos when your favorite dish suddenly vanishes from the menu because someone unauthorized decided to switch things up!

Put simply

Think of it like a restaurant where the kitchen staff don’t check IDs. Anyone could walk in, don an apron, and start changing the menu without anyone batting an eye! The app's flawed logic permits users to bypass authentication checks, meaning they can access or modify information they shouldn't normally touch. This lack of proper validation opens the door wide for unauthorized actions.

What to do

This oversight could allow malicious users to access personal information or even alter app data, potentially leading to user data breaches or unwanted changes. Imagine the chaos when your favorite dish suddenly vanishes from the menu because someone unauthorized decided to switch things up! Update the app to ensure robust authentication checks are in place, making sure that users can only access data they are authorized to see. Regularly audit your code for similar flaws to uphold user security. You've got this! With a quick update and some vigilance, the Eat Spray Love app can be safe and sound in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01581 · 75.3th percentile
Published
2020-12-07T12:40Z
EPSS history
Timeline
  • 07 DEC 12:40Z
    The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they…
    cvelistv5