CVE-2014-5861

CVE-2014-5861 describes a critical vulnerability in the BoyAhoy - Gay Chat Android application (version 4.3.6) where the app fails to properly validate X.509 certificates from SSL servers. This flaw allows an attacker to perform a man-in-the-middle (MitM) attack by presenting a crafted certificate, enabling them to spoof legitimate servers and potentially intercept sensitive user information. With a CVSS score of 5.4, this vulnerability has a medium severity, requiring adjacent network access and moderate attack complexity, but could lead to partial compromise of confidentiality, integrity, and availability. Despite its potential impact, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.