Security Advisory

CVE-2020-5604

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-07-09 01:05:20

Last updated 2024-08-04 08:30:24

Assigner jpcert

CVSS score not scored

State PUBLISHED

Description

Android App 'Mercari' (Japan version) prior to version 3.52.0 allows arbitrary method execution of a Java object by a remote attacker via a Man-In-The-Middle attack by using Java Reflection API of JavaScript code on WebView.

← Browse all CVEs View on cve.org ↗