Online Shopping App
Approved changes feed: RSS · Atom
cpe:2.3:a:meesho:online_shopping_app:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Meesho (3c53c04f-5fa4-5ad9-b45c-d71f835a0cd8) |
|---|---|
| Product | Online Shopping App (7ebe1206-dc4d-5aa2-ac32-c7a2ce3d69d4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-18591 |
vulnerable | 2026-09-16 04:34:01.587898 |
Meesho Online Shopping App com.meesho.supply cleartext storage
LOW (2.1)
A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android. Affected by this vulnerability is an unknown functionality of the component com.meesho.supply. Such manipulation of the argument user_id/phone number/email address/name leads to cleartext storage of sensitive information. The attack can be executed directly on the physical device. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Published: 2026-08-03T07:15:08.213Z
Updated: 2026-08-03T13:19:02.255Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-5682 |
vulnerable | 2026-06-08 08:07:03.978565 |
Meesho Online Shopping App com.meesho.supply endpoint risky encryption
LOW (3.7)
A vulnerability has been found in Meesho Online Shopping App up to 27.3 on Android. Affected is an unknown function of the file /api/endpoint of the component com.meesho.supply. Such manipulation leads to risky cryptographic algorithm. The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used.
Published: 2026-04-06T19:45:14.504Z
Updated: 2026-04-07T13:37:44.226Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.