CVE-2020-5800

Published: Dec 7, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to.

Affected (2)

Products: Eat Spray Love Project: Eat Spray Love

Eat Spray Love Project

1 product

Eat Spray Love

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Eat Spray Love Project Eat Spray Love	Version 2.0.20
Eat Spray Love Project Eat Spray Love	Version 2.0.20

Related CWEs

CWE-669

Incorrect Resource Transfer Between Spheres

The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

References (2)

https://www.tenable.com/security/research/tra-2020-65

Source: vulnreport@tenable.com

ExploitThird Party Advisory

https://www.tenable.com/security/research/tra-2020-65

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.