Duolingo

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Duolingo records in CISA KEV

No Duolingo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tinycards 1 record MEDIUM

Records

1 record in Tinycards · all components

TI-2017-12446 CVE-2017-16905 · GHSA-m38j-h3g6-jjjc

The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted…

MEDIUM 41

The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, and consequently achieve remote code execution, via a man-in-the-middle attack.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.0348 Published 2018-01-05 No fix listed CWE-94

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0