What’s Vulnerable › Vulnerabilities

CVE-2018-6018

• Severity: critical (CVSS 9.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-01-24 · updated 2026-06-17
• Weakness: CWE-319

Description

Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by sniffing network traffic.

Affected products

• Tinder: all versions

References

• https://www.checkmarx.com/2018/01/23/tinder-someone-may-watching-swipe-2/
• https://www.wired.com/story/tinder-lack-of-encryption-lets-strangers-spy-on-swipes/
• https://www.checkmarx.com/2018/01/23/tinder-someone-may-watching-swipe-2/
• https://www.wired.com/story/tinder-lack-of-encryption-lets-strangers-spy-on-swipes/

Get alerted when CVE-2018-6018 or the next vulnerability affects your stack