Beveiligingsadvies

CVE-2024-45203

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-09-09 06:42:30

Laatst bijgewerkt 2025-03-13 19:35:38

Toegewezen door jpcert

CVSS-score 4.3

Status PUBLISHED

Beschrijving

Improper authorization in handler for custom URL scheme issue in "@cosme" App for Android versions prior 5.69.0 and "@cosme" App for iOS versions prior to 6.74.0 allows an attacker to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phishing attack.

← Alle CVE's bekijken Bekijk op cve.org ↗