Описание
Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from any app via a malicious app.
Ссылки
- Release NotesVendor Advisory
- ExploitIssue TrackingPatchVendor Advisory
- Third Party Advisory
- Release NotesVendor Advisory
- ExploitIssue TrackingPatchVendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Одновременно
EPSS
8.1 High
CVSS3
Дефекты
Связанные уязвимости
Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from any app via a malicious app.
Chromium: CVE-2022-1130 Insufficient validation of untrusted input in WebOTP
Insufficient validation of trust input in WebOTP in Google Chrome on A ...
Insufficient validation of trust input in WebOTP in Google Chrome on Android prior to 100.0.4896.60 allowed a remote attacker to send arbitrary intents from any app via a malicious app.
Уязвимость интерфейса WebOTP API браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю выполнить произвольный код
EPSS
8.1 High
CVSS3