{"api_version":"1","generated_at":"2026-07-23T14:59:55+00:00","cve":"CVE-2020-5800","urls":{"html":"https://cve.report/CVE-2020-5800","api":"https://cve.report/api/cve/CVE-2020-5800.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2020-5800","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2020-5800"},"summary":{"title":"CVE-2020-5800","description":"The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to.","state":"PUBLIC","assigner":"vulnreport@tenable.com","published_at":"2020-12-07 13:15:00","updated_at":"2021-07-21 11:39:00"},"problem_types":["CWE-669"],"metrics":[],"references":[{"url":"https://www.tenable.com/security/research/tra-2020-65","name":"https://www.tenable.com/security/research/tra-2020-65","refsource":"MISC","tags":["Exploit","Third Party Advisory"],"title":"Eat Spray Love Mobile App Multiple Vulnerabilities - Research Advisory | Tenable®","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-5800","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-5800","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2020","cve_id":"5800","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eat_spray_love_project","cpe5":"eat_spray_love","cpe6":"2.0.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"android","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"5800","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eat_spray_love_project","cpe5":"eat_spray_love","cpe6":"2.0.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"iphone_os","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"5800","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eat_spray_love_project","cpe5":"eat_spray_love","cpe6":"2.0.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"android","cpe12":"*","cpe13":"*"},{"cve_year":"2020","cve_id":"5800","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"eat_spray_love_project","cpe5":"eat_spray_love","cpe6":"2.0.20","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"iphone_os","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_type":"CVE","data_format":"MITRE","data_version":"4.0","CVE_data_meta":{"ID":"CVE-2020-5800","ASSIGNER":"vulnreport@tenable.com","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"vendor_name":"n/a","product":{"product_data":[{"product_name":"Eat Spray Love","version":{"version_data":[{"version_value":"Eat Spray Love for iOS 2.0.20, Eat Spray Love for Android 2.0.20"}]}}]}}]}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Insufficient Access Controls"}]}]},"references":{"reference_data":[{"refsource":"MISC","name":"https://www.tenable.com/security/research/tra-2020-65","url":"https://www.tenable.com/security/research/tra-2020-65"}]},"description":{"description_data":[{"lang":"eng","value":"The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to."}]}},"nvd":{"publishedDate":"2020-12-07 13:15:00","lastModifiedDate":"2021-07-21 11:39:00","problem_types":["CWE-669"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL"},"exploitabilityScore":3.9,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":7.5},"severity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:eat_spray_love_project:eat_spray_love:2.0.20:*:*:*:*:android:*:*","cpe_name":[]},{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:eat_spray_love_project:eat_spray_love:2.0.20:*:*:*:*:iphone_os:*:*","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2020","CveId":"5800","Ordinal":"166046","Title":"CVE-2020-5800","CVE":"CVE-2020-5800","Year":"2020"},"notes":[{"CveYear":"2020","CveId":"5800","Ordinal":"1","NoteData":"The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to.","Type":"Description","Title":null},{"CveYear":"2020","CveId":"5800","Ordinal":"2","NoteData":"2020-12-07","Type":"Other","Title":"Published"},{"CveYear":"2020","CveId":"5800","Ordinal":"3","NoteData":"2020-12-07","Type":"Other","Title":"Modified"}]}}}