CVE-2024-28895: XSS
'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the WebView of 'Yahoo! JAPAN' App via other app installed on the user's device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28895?
CVE-2024-28895 is classified as a high severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2024-28895?
To fix CVE-2024-28895, update the Yahoo! JAPAN App for Android to version 3.161.2 or later, or the iOS version to 4.109.1 or later.
What software is affected by CVE-2024-28895?
CVE-2024-28895 affects the Yahoo! JAPAN App for Android versions 2.3.1 to 3.161.1 and the iOS versions 3.2.2 to 4.109.0.
What is the impact of CVE-2024-28895 if exploited?
If exploited, CVE-2024-28895 allows an arbitrary script to be executed in the WebView of the Yahoo! JAPAN App, potentially compromising user data.
Is there a workaround for CVE-2024-28895?
There are no known workarounds for CVE-2024-28895; users should update the app as the primary mitigation.