CVE-2023-2509 (adm, looksgood, soundsgood) | allinfosecnews.com

May 17, 2023, 7:15 a.m. |

National Vulnerability Database web.nvd.nist.gov

A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps. An attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below, LooksGood 2.0.0.R129 and below and SoundsGood 2.3.0.r1027 and below.

access adm application applications apps browser cookies cross-site cve exploit information inject malicious products scripting scripts sensitive information target vulnerability xss

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 5 months, 2 weeks ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android bypass check cve +10

Information Security Engineers

@ D. E. Shaw Research | New York City

View on infosec-jobs.com

Cyber Security Professional

@ BT Group | 25A DLF City Phase-III,, Gurugram, India

View on infosec-jobs.com

Head of Cyber Security Operations

@ Vector Limited | Auckland, New Zealand

View on infosec-jobs.com

Security Analyst (SOC)

@ Accesa & RaRo | Cluj-Napoca, Romania

View on infosec-jobs.com

Senior - IT Compliance-Cyber (Technology Risk Consulting)

@ EY | Bengaluru, KA, IN, 560016

View on infosec-jobs.com

Security Automation Engineer Internship - Secure Development Team Product Security (Brno, Czech Republic)

@ Red Hat | Brno, Czechia

View on infosec-jobs.com