CVEs-PoC/2018/CVE-2018-6018.md

CVE-2018-6018

Description

Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive information by sniffing network traffic.

POC

Reference

• https://www.wired.com/story/tinder-lack-of-encryption-lets-strangers-spy-on-swipes/
• https://www.wired.com/story/tinder-lack-of-encryption-lets-strangers-spy-on-swipes/

Github

No PoCs found on GitHub currently.