← Database

CVE-2022-4457

MEDIUM CVSS: 5.5 Published: 2023-01-11 Modified: 2026-06-17

Description

Due to a misconfiguration in the manifest file of the WARP client for Android, it was possible to a perform a task hijacking attack. An attacker could create a malicious mobile application which could hijack legitimate app and steal potentially sensitive information when installed on the victim's device.

Affected Platforms

Cloudflare Warp

Weakness Type

CWE-200, NVD-CWE-noinfo

References