CVE-2021-20833: Soda-Inc Snkrdunk

High severity, CVSS 7.4. EPSS: 0.5% chance of exploitation in the next 30 days.

The SNKRDUNK Market Place App for iOS versions prior to 2.2.0 does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on and/or alter encrypted communication via a crafted certificate.

Affected products

• Soda-Inc Snkrdunk: before 2.2.0 (fixed in 2.2.0)

Published 2021-10-13. Last modified 2026-06-17.