CVE-2021-25520CWE-20

Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to…

Medium · published December 8, 2021

CVSS v3.1
5.9
EPSS
0%
Percentile
35.7
In the wild
Unconfirmed
What it is

Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to execute script codes in Samsung Internet.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00425 · 35.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-12-08T14:20Z
EPSS history
Timeline
  • 08 DEC 14:20Z
    Insecure caller check and input validation vulnerabilities in SearchKeyword deeplink logic prior to Samsung Internet 16.0.2 allows unstrusted applications to…
    cvelistv5