Vulnerability Description
A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the Google service over plain HTTP.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| >= 2.20.108, <= 2.20.140 | ||
| Whatsapp Business | >= 2.20.35, <= 2.20.49 |
Related Weaknesses (CWE)
References
- https://www.whatsapp.com/security/advisories/2020/Vendor Advisory
- https://www.whatsapp.com/security/advisories/2020/Vendor Advisory
FAQ
What is CVE-2020-1902?
CVE-2020-1902 is a vulnerability with a CVSS score of 7.5 (HIGH). A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the G...
How severe is CVE-2020-1902?
CVE-2020-1902 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-1902?
Check the references section above for vendor advisories and patch information. Affected products include: Whatsapp Whatsapp, Whatsapp Whatsapp Business.