Security Advisory

CVE-2024-28895

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-04-01 00:16:08

Last updated 2024-11-06 20:45:53

Assigner jpcert

CVSS score not scored

State PUBLISHED

Description

'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the WebView of 'Yahoo! JAPAN' App via other app installed on the user's device.

← Browse all CVEs View on cve.org ↗