CVE-2020-5800 Auth bypass in Eat Spray Love
Attackers can bypass authentication in the Eat Spray Love mobile app to access or modify unauthorized user information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-5800?
CVE-2020-5800 is a critical authentication bypass vulnerability in Eat Spray Love, published on 7 Dec 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to.
Weakness: CWE-669
Which versions are affected by CVE-2020-5800?
It affects 1 product.
Products include Eat Spray Love Project Eat Spray Love.
How do I fix CVE-2020-5800?
No fix has been published for CVE-2020-5800 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2020-5800 being exploited?
There is no known exploitation of CVE-2020-5800 in the wild and no public exploit code.
Other vulnerabilities in Eat Spray Love
Sources
Also known as GHSA-2vq4-6g9q-2xjq.