Information disclosure in Gree

CVE-2013-0704

Directory traversal vulnerability in the GREE application before 1.3.3 for Android allows remote attackers to obtain sensitive information via a crafted URL, which is not properly handled during interaction with other applications.

Vulnerability class: Information Disclosure

EPSS: 0.014 (69.0th percentile) — read the EPSS interpretation.

Affected products

Gree
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)