laola.redbull 安全漏洞

laola.redbull is an application. A security vulnerability exists in the laola.redbull application 5.1.9-R and earlier versions that originated from allowing an attacker to load arbitrary content into the application...

CVE-2023-29459

The CVE corresponds to the Android app laola.redbull (5.1.9-R and earlier). It exposes the exported activity at.redbullsalzburg.android.AppMode.Default.Splash.SplashActivity, which accepts a data: URI. The URI’s target is loaded into the app’s WebView, enabling loading of arbitrary content within...