CVE-2023-51219

A deep link validation issue in KakaoTalk version 10.4.3 allows a remote adversary to force users to execute attacker-controlled JavaScript within a WebView . This vulnerability can be escalated by triggering a second WebView that leaks an access token in an HTTP request header. An attacker could...