Read the docs

Komoot

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Komoot records in CISA KEV

No Komoot vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records

TI-2021-04868 CVE-2021-21823 · GHSA-8729-gjh2-fh36

Information disclosure in Komoot

Priority LOW 35

An information disclosure vulnerability exists in the Friend finder functionality of GmbH Komoot version 10.26.9 up to 11.1.11.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00895 Published 2021-08-20 No fix listed CWE-359
Priority LOW 33

The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to…

CVSS 3.0HIGH 7.4 Network No auth No interaction EPSS 0.00491 Published 2018-07-12 No fix listed CWE-200
Open these records in search →