CVE-2023-41708CWE-79

References to the "app loader" functionality could contain redirects to unexpected locations

Medium · published February 12, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
40.1
In the wild
Unconfirmed
What it is

References to the "app loader" functionality could contain redirects to unexpected locations. Attackers could forge app references that bypass existing safeguards to inject malicious script code. Please deploy the provided updates and patch releases. References to apps are now controlled more strict to avoid relative references. No publicly available exploits are known.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00475 · 40.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-02-12T08:15Z
EPSS history
Timeline
  • 12 FEB 08:15Z
    References to the "app loader" functionality could contain redirects to unexpected locations
    cvelistv5