CVE-2019-17151

CVE-2019-17151 affects Tencent WeChat (before 7.0.9). The flaw is in parsing a user’s profile name, enabling unsafe redirection via the name field when the target is in a chat with the attacker. Exploitation requires user interaction within a chat session. The vulnerability is described as “name ...