CleverTap Cordova Plugin version 2.6.2 allows a remote attacker to execute JavaScript code in any application that is opened via a specially constructed deeplink by an attacker.

This is possible because the plugin does not correctly validate the data coming from the deeplinks before using them.

Source: CVE-2023-2507

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다