Lucene search
JpcertVULNRICHMENT:CVE-2024-28895HistoryApr 01, 2024 - 12:16 a.m.
CVE-2024-28895
2024-04-0100:16:08
jpcert
github.com
3
yahoo! japan
xss
android
ios
webview
exploit
‘Yahoo! JAPAN’ App for Android v2.3.1 to v3.161.1 and ‘Yahoo! JAPAN’ App for iOS v3.2.2 to v4.109.0 contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the WebView of ‘Yahoo! JAPAN’ App via other app installed on the user’s device.
References
Related
nvd
nvd
CVE-2024-28895
2024-04-01 01:15:46
cvelist
cvelist
CVE-2024-28895
2024-04-01 00:16:08
jvn
jvn
JVN#23528780: "Yahoo! JAPAN" App vulnerable to cross-site scripting
2024-03-29 00:00:00
cve
cve
CVE-2024-28895
2024-04-01 01:15:46
AI Score
6.1
Confidence
High
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-28895