CVE-2017-16905
The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, and consequently achieve remote code e…
Published: 2018-01-05 · CVSS: Unscored
The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, and consequently achieve remote code execution, via a man-in-the-middle attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7