Описание
Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
Ссылки
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.2.25 (включая)Версия до 1.3.3 (включая)
Одно из
cpe:2.3:a:nttr:goo_blog:*:*:*:*:*:android:*:*
cpe:2.3:a:nttr:goo_blog:*:*:*:*:*:iphone_os:*:*
EPSS
Процентиль: 65%
0.0049
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
CVSS3: 5.3
github
больше 3 лет назад
Improper access control vulnerability in goo blog App for Android ver.1.2.25 and earlier and for iOS ver.1.3.3 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
EPSS
Процентиль: 65%
0.0049
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
NVD-CWE-Other