JVN#02895867: Sleipnir Mobile for Android loads arbitrary Extension API

Sleipnir Mobile for Android has an Extension mechanism to customize browser functions, and this Extension function makes calls to an Extension API.
Sleipnir Mobile for Android contains an issue that may allow a specially crafted web page to load an arbitrary Extension API.

Impact

If a user accesses a malicious URL, an attacker may cause an unintended file download, or obtain information of the HTTP response body for a site that has been logged into using Sleipnir Mobile for Android.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

• Sleipnir Mobile for Android 2.8.0 and earlier
• Sleipnir Mobile for Android Black Edition 2.8.0 and earlier