What is CVE-2020-25203?

CVE-2020-25203 is a medium-severity vulnerability in Framer Preview. CVSS score: 5.5/10. Published 2020-09-25.

How severe is CVE-2020-25203?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Is CVE-2020-25203 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Framer Preview

CVE-2020-25203

The Framer Preview application 12 for Android exposes com.framer.viewer.FramerViewActivity to other applications. By calling the intent with the action set to android.intent.action.VIEW, any other application is able to load any website/web content into the application's context, which is shown as a full-screen overlay to the user.

EPSS: 0.005 (37.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

Framer Framer_preview — versions 12.0
N/a — versions n/a

Public proof-of-concept exploits

References

cve@mitre.org (x_refsource_MISC, Broken Link)
cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-25203?: CVE-2020-25203 is a medium-severity vulnerability in Framer Preview. CVSS score: 5.5/10. Published 2020-09-25.
How severe is CVE-2020-25203?: Medium severity. CVSS v3 base score is 5.5 out of 10.
Is CVE-2020-25203 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.