Vulnerabilities > Komoot

DATE CVE VULNERABILITY TITLE RISK
2021-08-20 CVE-2021-21823 Information Exposure vulnerability in Komoot 10.26.9/11.0.14/11.1.11
An information disclosure vulnerability exists in the Friend finder functionality of GmbH Komoot version 10.26.9 up to 11.1.11.
network
low complexity
komoot CWE-200
7.5
2018-07-12 CVE-2017-14709 Improper Certificate Validation vulnerability in Komoot
The komoot GmbH "Komoot - Cycling & Hiking Maps" app before 9.3.2 -- aka komoot-cycling-hiking-maps/id447374873 -- for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
network
high complexity
komoot CWE-295
7.4