Vulnerability in Huawei Appgallery
CVE-2018-7932
Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running vulnerability. An attacker may set up a malicious network environment and trick user into accessing a malicious web page to bypass the whitelist mechanism, which make the malicious Javascript loaded and run in the smart phone.
EPSS: 0.004 (34.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Huawei Appgallery
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2018-7932?
- CVE-2018-7932 is a high-severity vulnerability in Huawei Appgallery, classified under Insufficient Verification of Data Authenticity. CVSS score: 8.8/10. Published 2018-04-24.
- How severe is CVE-2018-7932?
- High severity. CVSS v3 base score is 8.8 out of 10.