What’s Vulnerable › Vulnerabilities

CVE-2022-42979

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 24.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-06 · updated 2026-06-17
• Weakness: CWE-295

Description

Information disclosure due to an insecure hostname validation in the RYDE application 5.8.43 for Android and iOS allows attackers to take over an account via a deep link.

Affected products

• Rydesharing Ryde: 5.8.43

References

• https://medium.com/%40jalee0606/how-i-found-my-first-one-click-account-takeover-via-deeplink-in-ryde-5406010c36d8
• https://medium.com/%40jalee0606/how-i-found-my-first-one-click-account-takeover-via-deeplink-in-ryde-5406010c36d8

Get alerted when CVE-2022-42979 or the next vulnerability affects your stack