exploitDog

CVE-2025-14019

Опубликовано: 15 дек. 2025

Источник: nvd

CVSS3: 3.4

CVSS3: 4.7

EPSS Низкий

Описание

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks.

Ссылки

https://hackerone.com/reports/3062270
Permissions Required
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:linecorp:line:*:*:*:*:*:android:*:*

Версия от 13.8.0 (включая) до 15.5.0 (включая)

EPSS

Процентиль: 8%

0.00029

Низкий

3.4 Low

CVSS3

4.7 Medium

CVSS3

Дефекты

CWE-451

Связанные уязвимости

GHSA-7hpx-mgwg-xh9p

CVSS3: 3.4

github

около 2 месяцев назад

LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the in-app browser where a specific layout could obscure the full-screen warning prompt, potentially allowing attackers to conduct phishing attacks.

EPSS

Процентиль: 8%

0.00029

Низкий

3.4 Low

CVSS3

4.7 Medium

CVSS3

Дефекты

CWE-451