Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-6913

Опубликовано: 19 дек. 2023
Источник: nvd
CVSS3: 8.1
EPSS Низкий

Описание

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView without prompting or displaying it to the user. This vulnerability could trigger phishing attacks.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:imoulife:imou_life:6.7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 26%
0.00093
Низкий

8.1 High

CVSS3

Дефекты

CWE-384

Связанные уязвимости

CVSS3: 8.1
github
около 2 лет назад

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView without prompting or displaying it to the user. This vulnerability could trigger phishing attacks.

EPSS

Процентиль: 26%
0.00093
Низкий

8.1 High

CVSS3

Дефекты

CWE-384