What is CVE-2024-45240?

CVE-2024-45240 is a high-severity vulnerability in N/a. CVSS score: 7.4/10. Published 2024-08-24.

How severe is CVE-2024-45240?

High severity. CVSS v3 base score is 7.4 out of 10.

Is CVE-2024-45240 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2024-45240

The TikTok (aka com.zhiliaoapp.musically) application before 34.5.5 for Android allows the takeover of Lynxview JavaScript interfaces via deeplink traversal (in the application's exposed WebView). (On Android 12 and later, this is only exploitable by third-party applications.)

EPSS: 0.002 (5.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

Ch0pin/related_

References

cve@mitre.org

Frequently asked questions

What is CVE-2024-45240?: CVE-2024-45240 is a high-severity vulnerability in N/a. CVSS score: 7.4/10. Published 2024-08-24.
How severe is CVE-2024-45240?: High severity. CVSS v3 base score is 7.4 out of 10.
Is CVE-2024-45240 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.