Vulnerability in Fenrir-Inc Sleipnir Mobile

CVE-2013-2304

The Sleipnir Mobile application 2.8.0 and earlier and Sleipnir Mobile Black Edition application 2.8.0 and earlier for Android allow remote attackers to load arbitrary Extension APIs, and trigger downloads or obtain sensitive HTTP response-body information, via a crafted web page.

EPSS: 0.009 (55.4th percentile) — read the EPSS interpretation.

Affected products

Fenrir-inc Sleipnir_mobile — versions 1.0.0, 1.1.0, 1.2.0
Google Android
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)