CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
Confidence
Low
EPSS
Percentile
65.8%
The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote attackers to load arbitrary Extension APIs, and trigger downloads or obtain sensitive HTTP response-body information, via a crafted web page.
Vendor | Product | Version | CPE |
---|---|---|---|
fenrir-inc | sleipnir_mobile | * | cpe:2.3:a:fenrir-inc:sleipnir_mobile:*:*:*:*:*:*:*:* |
fenrir-inc | sleipnir_mobile | 1.0.0 | cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.0.0:alpha:*:*:*:*:*:* |
fenrir-inc | sleipnir_mobile | 1.0.0 | cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.0.0:beta_update1:*:*:*:*:*:* |
fenrir-inc | sleipnir_mobile | 1.0.0 | cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.0.0:rc:*:*:*:*:*:* |
fenrir-inc | sleipnir_mobile | 1.1.0 | cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.1.0:*:*:*:*:*:*:* |
fenrir-inc | sleipnir_mobile | 1.2.0 | cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.2.0:*:*:*:*:*:*:* |
fenrir-inc | sleipnir_mobile | 1.3.0 | cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.3.0:*:*:*:*:*:*:* |
fenrir-inc | sleipnir_mobile | 1.4.0 | cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.4.0:*:*:*:*:*:*:* |
fenrir-inc | sleipnir_mobile | 1.5.0 | cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.5.0:*:*:*:*:*:*:* |
fenrir-inc | sleipnir_mobile | 1.5.1 | cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.5.1:*:*:*:*:*:*:* |