Lucene search

[email protected]CVE-2020-23349

HistoryApr 05, 2022 - 4:15 p.m.

CVE-2020-23349

2022-04-0516:15:10

[email protected]

web.nvd.nist.gov

cve-2020-23349

intent redirection

sina weibo

android sdk

security vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

33.9%

JSON

An intent redirection issue was doscovered in Sina Weibo Android SDK 4.2.7 (com.sina.weibo.sdk.share.WbShareTransActivity), any unexported Activities could be started by the com.sina.weibo.sdk.share.WbShareTransActivity.

Affected configurations

NVD

Node

weiboandroid_software_development_kitMatch4.2.7

CPENameOperatorVersion
weibo:android_software_development_kitweibo android software development kiteq4.2.7

CPE	Name	Operator	Version
weibo:android_software_development_kit	weibo android software development kit	eq	4.2.7

References

github.com/sinaweibosdk/weibo_android_sdk/issues/406

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

7.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

33.9%

JSON

Related for CVE-2020-23349

nvd1 cvelist1 prion1