CVE-2023-6542 — Improper Export of Android Application Components in SAP EMARSYS SDK ANDROID
Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any…
Published: 2023-12-12 · CVSS: 7.1 · CVSS 3.1
Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any validation directly from the host application. On successful attack, an attacker could navigate to arbitrary URL including application deep links on the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7