CVE-2021-40180

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

CVE-2021-40180

In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...

CVE-2021-40180

According to connected documents, CVE-2021-40180 affects WeChat app version 8.0.10 for Android and iOS, where a mini program can invoke wx.searchContacts to access the user's address book and obtain sensitive information. The root cause is a permissions/API misuse in the mini program environment ...