CVE-2020-20096

Published: Mar 23, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Whatsapp iOS 2.19.80 and prior and Android 2.19.222 and prior user interface does not properly represent URI messages to the user, which results in URI spoofing via specially crafted messages.

Affected (2)

Products: Whatsapp: Whatsapp

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Whatsapp Whatsapp	Up to 2.19.222
Whatsapp Whatsapp	Up to 2.19.80

References (4)

http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://github.com/zadewg/RIUS

Source: cve@mitre.org

ExploitThird Party Advisory

http://packetstormsecurity.com/files/166448/RTLO-Injection-URI-Spoofing.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

https://github.com/zadewg/RIUS

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.