The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote attackers to load arbitrary Extension APIs, and trigger downloads or obtain sensitive HTTP response-body information, via a crafted web page.
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
History
21 Nov 2024, 01:51
Type | Values Removed | Values Added |
---|---|---|
References | () http://jvn.jp/en/jp/JVN02895867/index.html - | |
References | () http://jvndb.jvn.jp/jvndb/JVNDB-2013-000033 - |
Information
Published : 2013-04-16 14:04
Updated : 2024-11-21 01:51
NVD link : CVE-2013-2304
Mitre link : CVE-2013-2304
CVE.ORG link : CVE-2013-2304
JSON object : View
Products Affected
- android
fenrir-inc
- sleipnir_mobile
CWE
CWE-264
Permissions, Privileges, and Access Controls