← Database

CVE-2025-27388

N/A CVSS: N/A Published: 2025-08-14 Modified: 2026-06-17

Description

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.

Affected Platforms

Unknown

Weakness Type

CWE-20

References