Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2gwm-8mq4-p9j4

Опубликовано: 19 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView without prompting or displaying it to the user. This vulnerability could trigger phishing attacks.

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView without prompting or displaying it to the user. This vulnerability could trigger phishing attacks.

EPSS

Процентиль: 26%
0.00093
Низкий

8.1 High

CVSS3

Дефекты

CWE-384

Связанные уязвимости

CVSS3: 8.1
nvd
около 2 лет назад

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView without prompting or displaying it to the user. This vulnerability could trigger phishing attacks.

EPSS

Процентиль: 26%
0.00093
Низкий

8.1 High

CVSS3

Дефекты

CWE-384