Security Advisory

CVE-2024-45240

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-08-24 00:00:00

Last updated 2024-11-05 21:59:50

Assigner mitre

State PUBLISHED

Description

The TikTok (aka com.zhiliaoapp.musically) application before 34.5.5 for Android allows the takeover of Lynxview JavaScript interfaces via deeplink traversal (in the applications exposed WebView). (On Android 12 and later, this is only exploitable by third-party applications.)

← Browse all CVEs View on cve.org ↗