CVE-2020-35456

MEDIUM 5.5CVE-2020-35456 · Published 17/03/2021 · updated 17/06/2026

In short

CVE-2020-35456 is a MEDIUM (CVSS 5.5) vulnerability affecting diibear (taidii).
Chance of exploitation in the next 30 days (EPSS): 0.54%, higher than 45.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
diibear taidii	`= 2.4.0`	No fix yet

Description

The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view private chat messages and media files via logcat because of excessive logging.

References

galapogos/Taidii-Diibear-Vulnerabilities · Third Party Advisory
play.google.com/store/apps/details · Product

More vulnerabilities in diibear

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free