CVE-2024-5739
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2024-5739 is a Universal XSS (UXSS) vulnerability affecting the in-app browser of LINE client for iOS versions below 14.9.0. This issue allows for the execution of arbitrary JavaScript in the top frame from an embedded iframe, which can be exploited if a victim clicks on a malicious iframe. The impact includes potential capture or alteration of content displayed in the top frame, as well as user session information. The vulnerability is limited to LINE client for iOS and does not impact other LINE clients such as the Android version. Users are advised to update to LINE client for iOS version 14.9.0 or higher to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Client
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions