Approved changes feed: RSS · Atom

cpe:2.3:a:cloudflare:warp:*:*:*:*:*:android:*:*

part: a version: * update: *

VendorCloudflare (5b4480cb-8cd0-5fc8-8b44-6534513ed911)
ProductWarp (bd41a0f8-a4ea-579a-ba9c-c7e2113041e0)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-0654 vulnerable 2026-06-03 14:48:52.355284 Spoofing User's Activity Loads in WARP Mobile Client (Android)
LOW (3.9)
Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack. In the event that an attacker built a malicious application and managed to install it on a victim's device, the attacker would be able to trick the user into believing that the app shown on the screen was the WARP client when in reality it was the attacker's app.
Published: 2023-08-29T15:05:19.623Z
Updated: 2024-09-30T17:46:56.466Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0238 vulnerable 2026-06-03 14:48:45.897141 Injecting Activity Loads in WARP Mobile Client
LOW (3.9)
Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerability which allowed a malicious app installed on a victim's device to exploit a peculiarity in an Android function, wherein under certain conditions, the malicious app could dictate the task behaviour of the WARP app.
Published: 2023-08-29T14:56:50.791Z
Updated: 2024-09-30T17:47:12.727Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4457 vulnerable 2026-06-03 14:48:35.740000 WARP client manifest misconfiguration leading to Task Hijacking
MEDIUM (5.5)
Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's device.
Published: 2023-01-11T16:32:28.382Z
Updated: 2025-04-09T13:43:50.264Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.