CVE-2023-2507 in Cordova Plugininformazioni

Riassunto

di MITRE • 15/07/2023

CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker.

This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsabile

Fluid Attacks

Prenotare

03/05/2023

Divulgazione

15/07/2023

Moderazione

accettato

CPE

pronto

EPSS

0.00855

KEV

no

Attività

molto basso

Fonti

MITREhttps://www.cve.org/CVERecord?id=CVE-2023-2507
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2023-2507
CVE Detailshttps://www.cvedetails.com/cve/CVE-2023-2507/

◂ PrecedenteVisione D'ensembleIl prossimo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!