CVE-2023-51219

Summary (CVE-2023-51219) : KakaoTalk 10.4.3 contains a deep link validation issue allowing a remote attacker to direct users to execute attacker-controlled JavaScript within a WebView. A chained WebView trigger can leak an access token in an HTTP header, enabling potential takeover of another use...