Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xrq8-vf9x-qh4p

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

When processing Deeplink scheme, Happypoint mobile app 6.3.19 and earlier versions doesn't check Deeplink URL correctly. This could lead to javascript code execution, url redirection, sensitive information disclosure. An attacker can exploit this issue by enticing an unsuspecting user to open a specific malicious URL.

When processing Deeplink scheme, Happypoint mobile app 6.3.19 and earlier versions doesn't check Deeplink URL correctly. This could lead to javascript code execution, url redirection, sensitive information disclosure. An attacker can exploit this issue by enticing an unsuspecting user to open a specific malicious URL.

EPSS

Процентиль: 54%
0.0031
Низкий

8.1 High

CVSS3

Дефекты

CWE-601
CWE-94

Связанные уязвимости

CVSS3: 8.1
nvd
больше 6 лет назад

When processing Deeplink scheme, Happypoint mobile app 6.3.19 and earlier versions doesn't check Deeplink URL correctly. This could lead to javascript code execution, url redirection, sensitive information disclosure. An attacker can exploit this issue by enticing an unsuspecting user to open a specific malicious URL.

EPSS

Процентиль: 54%
0.0031
Низкий

8.1 High

CVSS3

Дефекты

CWE-601
CWE-94