{"id":"CVE-2020-5800","aliases":["EUVD-2020-26957","GHSA-2vq4-6g9q-2xjq"],"status":"published","title":"The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass...","description":"The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01581,"percentile":0.75852,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287","CWE-669"],"published":"2020-12-07T12:40:30Z","modified":"2026-06-17T03:22:15Z","products":[{"vendor":"eat_spray_love_project","product":"eat_spray_love"}],"references":[{"url":"https://www.tenable.com/security/research/tra-2020-65","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-5800"},{"url":"https://github.com/advisories/GHSA-2vq4-6g9q-2xjq"}],"sources":{"cve":[{"id":"CVE-2020-5800","description":"The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to.","status":"published","published":"2020-12-07T12:40:30Z","modified":"2024-08-04T08:39:25.918Z","updated_at":"2026-11-02T14:35:47.22408Z"}],"euvd":[{"id":"EUVD-2020-26957","description":"The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to.","status":"published","published":"2020-12-07T12:40:30Z","modified":"2024-08-04T08:39:25Z","updated_at":"2026-11-03T03:08:05.705852Z"}],"ghsa":[{"id":"GHSA-2vq4-6g9q-2xjq","title":"The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass...","description":"The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to.","status":"published","published":"2022-05-24T17:35:27Z","modified":"2023-01-29T05:05:31Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:45:48.864861Z"}],"nvd":[{"id":"CVE-2020-5800","description":"The Eat Spray Love mobile app for both iOS and Android contains logic that allows users to bypass authentication and retrieve or modify information that they would not normally have access to.","status":"published","published":"2020-12-07T13:15:11.06Z","modified":"2026-06-17T03:22:15.617Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-669"],"updated_at":"2026-11-02T14:06:27.10541Z"}]}}