CVE-2023-6542
Improper Export of Android Application Components in SAP EMARSYS SDK ANDROID
概要
Improper Export of Android Application Components in SAP EMARSYS SDK ANDROID
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any validation directly from the host application. On successful attack, an attacker could navigate to arbitrary URL including application deep links on the device.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web me.sap.com
- web sap.com