Planet Fitness operates a mobile fitness application that presents a narrow vulnerability surface, with the disclosed issues centered on improper certificate validation in the workout platform. Treat this as a compact vendor profile; current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Planetfitness over time
Signals from CVEs in this vendor scope (1 CVEs).
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-43201MEDIUM The Planet Fitness Workouts iOS and Android mobile apps fail to properly validate TLS certificates, allowing an attacker with appropriate network access to obtain session tokens an | Sep 23, 2024 | 5.9 | 20 | NO | NO |
Signals from CVEs in this vendor scope (1 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Planetfitness.
Media articles that mention a CVE ID that affects a product developed by Planetfitness — matched by CVE ID, not by vendor name.