CVE-2020-1905
Low
Description
Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have allowed a malicious third party app chosen to open the file to guess the URIs for previously opened attachments until the opener app is terminated.
SeverityLow
CVSS3.3
Exploit probability—
ProductWhatsapp
PublishedOct 6, 2020
First seenOct 6, 2020
Weakness typeCWE-340CWE-340
How to fix
Update
- whatsapp whatsapp2.20.185 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| whatsapp whatsapp | v < 2.20.185 | 2.20.185 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.