En bref
- CVE-2023-2507 est une vulnérabilité MOYENNE (CVSS 6.1) touchant clevertap (clevertap), clevertap-cordova.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.85%, plus élevée que 58.5% des vulnérabilités.
- Correctif : mettre à jour vers 2.7.0 ou plus récent.
Description
CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker.
This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them.
NVD description
CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker.
This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free