PT-2022-8610 · Facebook · Whatsapp

Published 2022-03-23 · Updated 2022-03-30 · CVE-2020-20096

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions WhatsApp versions 2.19.80 and prior WhatsApp versions 2.19.222 and prior

Description The user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages.

Recommendations For WhatsApp iOS versions 2.19.80 and prior, update to a version later than 2.19.80 to resolve the issue. For WhatsApp Android versions 2.19.222 and prior, update to a version later than 2.19.222 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2020-20096

Affected Products

Whatsapp

References · 9

• 🔥 https://github.com/zadewg/RIUS · Exploit
• 🔥 http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-20096 · Security Note
• https://osv.dev/vulnerability/CVE-2020-20096 · Vendor Advisory
• https://t.me/cybersecuritytechnologies/5699 · Telegram Post
• https://t.me/s_e_reborn/2017 · Telegram Post
• https://t.me/true_secator/2779 · Telegram Post
• https://t.me/cibsecurity/39469 · Telegram Post
• https://t.me/pentestingnews/20964 · Telegram Post