CVE-2023-6542 | BDVDB-2026-218969 Detail

Description#

Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any validation directly from the host application. On successful attack, an attacker could navigate to arbitrary URL including application deep links on the device.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-12-12Record published in the CVE List.
2. Version 22024-08-02Most recent update recorded in the CVE List.