This vulnerability affects Meesho Online Shopping App versions 27.0 through 27.3 on Android. It arises from the use of a risky cryptographic algorithm in an unspecified function of the /api/endpoint component (com.meesho.supply). The vulnerability is remotely exploitable without user interaction or privileges but requires high attack complexity. The CVSS 4.0 base score is 6.3 (medium severity), reflecting limited impact and difficult exploitability. No vendor advisory or patch is currently available, and no known exploits have been observed in the wild.

The vulnerability could allow an attacker to compromise cryptographic protections within the affected component, potentially weakening data confidentiality or integrity. However, the attack complexity is high, and no privileges or user interaction are required. The overall impact is limited as indicated by the CVSS vector and score. There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation has been published, users and administrators should monitor for vendor updates. No specific mitigation steps are provided or confirmed at this time.