Newton Security Vulnerabilities - May

cve

CVE-2019-12365

The Newton application through 10.0.23 for Android allows XSS via an event attribute and arbitrary file loading via a src attribute, if the application has the READ_EXTERNAL_STORAGE permission.

6.1CVSS

5.9AI Score

0.001EPSS

2020-03-18 07:15 PM