CVE-2022-42979
CVSS V2 None
CVSS V3 None
Description
Information disclosure due to an insecure hostname validation in the RYDE application 5.8.43 for Android and iOS allows attackers to take over an account via a deep link.
Overview
- CVE ID
- CVE-2022-42979
- Assigner
- cve@mitre.org
- Vulnerability Status
- Analyzed
- Published Version
- 2023-01-06T04:15:07
- Last Modified Date
- 2023-01-11T21:29:51
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:rydesharing:ryde:5.8.43:*:*:*:*:android:*:* | 1 | OR | ||
| cpe:2.3:a:rydesharing:ryde:5.8.43:*:*:*:*:iphone_os:*:* | 1 | OR |
References
| Reference URL | Reference Tags |
|---|---|
| https://medium.com/@jalee0606/how-i-found-my-first-one-click-account-takeover-via-deeplink-in-ryde-5406010c36d8 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2022-42979 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-42979 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2023-01-06 04:16:48 | Added to TrackCVE | |||
| 2023-01-06 06:16:55 | 2023-01-06T05:33:28 | CVE Modified Date | updated | |
| 2023-01-06 06:16:55 | Received | Awaiting Analysis | Vulnerability Status | updated |
| 2023-01-10 18:20:21 | Awaiting Analysis | Undergoing Analysis | Vulnerability Status | updated |
| 2023-01-10 19:16:27 | Undergoing Analysis | Awaiting Analysis | Vulnerability Status | updated |
| 2023-01-12 05:16:05 | 2023-01-11T21:29:51 | CVE Modified Date | updated | |
| 2023-01-12 05:16:05 | Awaiting Analysis | Analyzed | Vulnerability Status | updated |
| 2023-01-12 05:16:06 | Weakness Enumeration | new | ||
| 2023-01-12 05:16:08 | CPE Information | updated |