VYPR

TinyCards

by DuoLingo

CVEs (1)

  • CVE-2017-16905Jan 5, 2018
    risk 0.00cvss epss 0.03

    The DuoLingo TinyCards application before 1.0 for Android has one use of unencrypted HTTP, which allows remote attackers to spoof content, and consequently achieve remote code execution, via a man-in-the-middle attack.