CVE-2017-15308

Huawei iReader app before 8.0.2.301 has an input validation vulnerability due to insufficient validation on the URL used for loading network data

published December 22, 2017

CVSS
—
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

Huawei iReader app before 8.0.2.301 has an input validation vulnerability due to insufficient validation on the URL used for loading network data. An attacker can control app access and load malicious websites created by the attacker, and the code in webpages would be loaded and run.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00878 · 58.7th percentile
Published
2017-12-22T17:00Z
EPSS history
Timeline
  • 22 DEC 17:00Z
    Huawei iReader app before 8.0.2.301 has an input validation vulnerability due to insufficient validation on the URL used for loading network data
    cvelistv5