CVE-2024-49418

Summary

CVE-2024-49418 is a newly disclosed vulnerability affecting GamingHub before version 6.1.03.4 in Korea and 7.1.02.4 in Global. This issue stems from insufficient URL authentication verification, enabling remote attackers to inject and execute malicious JavaScript code in the webview. The consequence could lead to unintended website data access, manipulation, or unauthorized actions. Users are advised to update their GamingHub application as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.