CVE-2023-0654 | BDVDB-2026-210592 Detail
CloudflareWARP Client
Description#
Due to a misconfiguration, the WARP Mobile Client (< 6.29) for Android was susceptible to a tapjacking attack. In the event that an attacker built a malicious application and managed to install it on a victim's device, the attacker would be able to trick the user into believing that the app shown on the screen was the WARP client when in reality it was the attacker's app.
Impact#
CAPEC-506 Tapjacking
Weaknesses#
- CWE-1021 Improper Restriction of Rendered UI Layers or Frames
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.