25 lines
1.0 KiB
JSON
Raw Normal View History

{
"id": "CVE-2024-23727",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-28T21:16:01.413",
"lastModified": "2024-03-29T12:45:02.937",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The YI Smart Kami Vision com.kamivision.yismart application through 1.0.0_20231219 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component."
},
{
"lang": "es",
"value": "La aplicaci\u00f3n YI Smart Kami Vision com.kamivision.yismart hasta 1.0.0_20231219 para Android permite a un atacante remoto ejecutar c\u00f3digo JavaScript arbitrario a trav\u00e9s de una intenci\u00f3n impl\u00edcita en el componente com.ants360.yicamera.activity.WebViewActivity."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/actuator/yi/blob/main/com.kamivision.yismart.V1.0.0_20231219.md",
"source": "cve@mitre.org"
}
]
}