CVE-2024-6051CWE-926

Cross Application Scripting in Redlink SDK

Medium · published September 30, 2024

CVSS v4.0
4.3
EPSS
0%
Percentile
5.2
In the wild
Unconfirmed
What it is

Cross Application Scripting vulnerability in Vercom S.A. Redlink SDK in specific situations allows local code injection and to manipulate the view of a vulnerable application.This issue affects Redlink SDK versions through 1.13.

The record
Technical detail
CVSS v4.0
4.3 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:L/U:Clear
EPSS
0.00163 · 5.2th percentile
Weakness
CWE-926 · Improper Export of Android Application Components
Published
2024-09-30T12:33Z
EPSS history
Timeline
  • 30 SEP 12:33Z
    Cross Application Scripting in Redlink SDK
    cvelistv5