TI-2021-04868 CVE-2021-21823 · GHSA-8729-gjh2-fh36
Information disclosure in Komoot
Priority LOW 35
An information disclosure vulnerability exists in the Friend finder functionality of GmbH Komoot version 10.26.9 up to 11.1.11.
No Komoot vulnerabilities are listed in CISA KEV.
2 records in Komoot · all components
An information disclosure vulnerability exists in the Friend finder functionality of GmbH Komoot version 10.26.9 up to 11.1.11.
The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to…