CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.1. It affects Android.
CVE
CVE-2023-6542
Severity
HIGH
CVSS
7.1
EPSS
0.22%
Android
Original NVD Description
Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any validation directly from the host application. On successful attack, an attacker could navigate to arbitrary URL including application deep links on the device.
Related CVEs
Other vulnerabilities affecting the same vendor(s)