CVE-2025-45080

CVE-2025-45080 is a vulnerability found in the YONO SBI: Banking & Lifestyle app, version 1.23.36. The application uses unencrypted communications, which could allow attackers to perform man-in-the-middle (MITM) attacks. This vulnerability arises from the app transmitting sensitive banking and lifestyle data without encryption, exposing it to interception and manipulation. The vulnerability is due to the `android:usesCleartextTraffic="true"` setting in the application's manifest file. This setting permits the app to transmit data via unencrypted HTTP, even though Android OS security best practices typically disallow cleartext traffic by default. This can be exploited on public Wi-Fi or compromised networks, where attackers can observe or alter HTTP traffic, potentially compromising user login credentials, personal details, and financial transactions.