CVE-2019-14761

An issue was discovered in KaiOS 2.5. The pre-installed Note application is vulnerable to HTML and JavaScript injection attacks. A local attacker can inject arbitrary HTML into the Note application. At a bare minimum, this allows an attacker to take control over the Note application's UI e.g.,...

CVE-2019-14761

creationtimestamp| type| source ---|---|--- 2020-09-15 00:55:30+00:00| seen| https://t.me/cibsecurity/14651...

CVE-2019-14761

CVE-2019-14761 affects KaiOS 2.5, specifically the pre-installed Note application. The vulnerability is HTML/JavaScript injection in the Note app, exploitable by a local attacker to inject arbitrary HTML and take control of the app’s UI (e.g., prompt user to re-enter KaiOS credentials) and to abu...