CVE-2017-9045

PoC —

CVSS 3.0

5.9 medium

EPSS

<1%p18

Published

May 18, 2017 (May 18, 2017)

Modified

Jun 17, 2026

Description

The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.com without SSL, which makes it easier for man-in-the-middle attackers to spoof Feed and Schedule data by creating a modified blocks_v4.json file.

Vendors: google
Products: google i\/o 2017
Weakness: CWE-311
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.