CVE-2020-1902
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2020
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the Google service over plain HTTP.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
WhatsApp for Android
- Vendor
- Product
- WhatsApp for Android
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.20.140 | affected | Unavailable | Unavailable | Unavailable | None listed |
| unspecified | affected | custom | 2.20.140 | Unavailable | None listed |
| unspecified | unaffected | custom | 2.20.108 | Unavailable | None listed |
WhatsApp Business for Android
- Vendor
- Product
- WhatsApp Business for Android
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.20.49 | affected | Unavailable | Unavailable | Unavailable | None listed |
| unspecified | affected | custom | 2.20.49 | Unavailable | None listed |
| unspecified | unaffected | custom | 2.20.35 | Unavailable | None listed |