CVE-2020-20094

Published: Mar 23, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Instagram iOS 106.0 and prior and Android 107.0.0.11 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages

Affected (2)

Products: Facebook: Instagram

Facebook

1 product

Instagram

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Facebook Instagram	Up to 107.0.0.11
Facebook Instagram	Up to 106.0

References (4)

http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://github.com/zadewg/RIUS

Source: cve@mitre.org

ExploitThird Party Advisory

http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://github.com/zadewg/RIUS

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.