URI Spoofing in Facebook Messenger App for iOS and Android
CVE-2020-20093
6.5MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2020-20093?
The Facebook Messenger app for iOS and Android contains a flaw in its user interface that fails to accurately display URI messages. This vulnerability allows an attacker to exploit specially crafted messages to spoof URIs, potentially misleading users into interacting with malicious links. Users are advised to update their applications to mitigate risks associated with this security issue.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.