A vulnerability has been found in Meesho Online Shopping App up to 27.3 on Android. Affected is an unknown function of the file /api/endpoint of the component com.meesho.supply. Such manipulation leads to risky cryptographic algorithm.

The attack may be performed from remote. The attack requires a high level of complexity. The exploitability is told to be difficult.

The exploit has been disclosed to the public and may be used.