Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c5rx-58cv-6366

Опубликовано: 11 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs.

The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs.

EPSS

Процентиль: 94%
0.12795
Средний

9.8 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.8
nvd
больше 2 лет назад

The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. This relates to the com.mm.android.easy4ip.MainActivity activity. JavaScript execution is enabled in the WebView, and direct web content loading occurs.

EPSS

Процентиль: 94%
0.12795
Средний

9.8 Critical

CVSS3

Дефекты

CWE-94