CVE-2023-51010

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Dec 28, 2023
Updated: Jan 5, 2024

Summary

CVE-2023-51010 is a vulnerability affecting the AdSdkH5Activity component of com.sdjictec.qdmetro version 4.2.2. This issue enables attackers to introduce malicious URLs that bypass any filtering or checking mechanisms in the export function, potentially exposing users to security risks. Attackers may exploit this vulnerability to execute unintended actions or gain unauthorized access to sensitive data. Organizations utilizing this software are urged to update to a patched version as soon as possible to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share