CVE-2019-9140highCWE-94

CVE-2019-9140: fallo de gravedad alta en SPC CLOUD Happypoint mobile app

Happypoint mobile application information disclosure vulnerability

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Happypoint mobile app

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.8epss 1.2%
When processing Deeplink scheme, Happypoint mobile app 6.3.19 and earlier versions doesn't check Deeplink URL correctly. This could lead to javascript code execution, url redirection, sensitive information disclosure. An attacker can exploit this issue by enticing an unsuspecting user to open a specific malicious URL.
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
SPC CLOUD · Happypoint mobile app