CVE-2019-17151

This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to exploit this vulnerability in that the target must be within a chat session together with the attacker. The specific flaw...

CVE-2019-17151

CVE-2019-17151 affects Tencent WeChat (before 7.0.9). The flaw is in parsing a user’s profile name, enabling unsafe redirection via the name field when the target is in a chat with the attacker. Exploitation requires user interaction within a chat session. The vulnerability is described as “name ...