Lucene search

MitreCVE-2023-51010

HistoryDec 28, 2023 - 4:15 a.m.

CVE-2023-51010

2023-12-2804:15:08

mitre

web.nvd.nist.gov

cve-2023-51010

issue

export component

adsdkh5activity

com.sdjictec.qdmetro

v4.2.2

attackers

crafted url

filtering

checking

nvd

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

An issue in the export component AdSdkH5Activity of com.sdjictec.qdmetro v4.2.2 allows attackers to open a crafted URL without any filtering or checking.

Affected configurations

Nvd

Node

qd-metroqingdao_metroMatch4.2.2android

VendorProductVersionCPE
qd-metroqingdao_metro4.2.2cpe:2.3:a:qd-metro:qingdao_metro:4.2.2:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
qd-metro	qingdao_metro	4.2.2	cpe:2.3:a:qd-metro:qingdao_metro:4.2.2:::::android::

References

github.com/firmianay/security-issues/tree/main/app/com.sdjictec.qdmetro

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

Related for CVE-2023-51010