ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep link in a WebView that…
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep link in a WebView that exposes the Android and Offerwall JavaScript bridges without validating the page origin. After a user opens the crafted link, the page can invoke getUserInfo, getCredentials, and initUser to obtain user metadata and an encrypted credential payload.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Product
- Android
- Exposure class
- Mobile OS
- NVD status
- Received
Why it ranks 26 (Notable)
- Product class: mobile OS
- Widely deployed vendor product (Google)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.