CVE-2022-42979

Information disclosure due to an insecure hostname validation in the RYDE application 5.8.43 for Android and iOS allows attackers to take over an account via a…

High · published January 6, 2023

CVSS v3.1

8.8

EPSS

24%

Percentile

97.9

In the wild

Unconfirmed

What it is

Information disclosure due to an insecure hostname validation in the RYDE application 5.8.43 for Android and iOS allows attackers to take over an account via a deep link.

The record

Technical detail

CVSS v3.1: 8.8 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.24328 · 97.9th percentile
Published: 2023-01-06T00:00Z

EPSS history

Timeline

06 JAN 00:00Z
Information disclosure due to an insecure hostname validation in the RYDE application 5.8.43 for Android and iOS allows attackers to take over an account via a…
cvelistv5