CVE-2019-9140highCWE-94

CVE-2019-9140: high-severity vulnerability in SPC CLOUD Happypoint mobile app

Happypoint mobile application information disclosure vulnerability

Published · Updated

Follow this CVE+ Monitor Happypoint mobile app

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 1.2%
When processing Deeplink scheme, Happypoint mobile app 6.3.19 and earlier versions doesn't check Deeplink URL correctly. This could lead to javascript code execution, url redirection, sensitive information disclosure. An attacker can exploit this issue by enticing an unsuspecting user to open a specific malicious URL.
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
SPC CLOUD · Happypoint mobile app