CVE-2023-51010
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Dec 28, 2023
Updated: Jan 5, 2024
Summary
CVE-2023-51010 is a vulnerability affecting the AdSdkH5Activity component of com.sdjictec.qdmetro version 4.2.2. This issue enables attackers to introduce malicious URLs that bypass any filtering or checking mechanisms in the export function, potentially exposing users to security risks. Attackers may exploit this vulnerability to execute unintended actions or gain unauthorized access to sensitive data. Organizations utilizing this software are urged to update to a patched version as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share