What’s Vulnerable › Vulnerabilities
CVE-2024-28895
- Severity: medium (CVSS 6.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-04-01 · updated 2026-06-17
- Weakness: CWE-79
Description
'Yahoo! JAPAN' App for Android v2.3.1 to v3.161.1 and 'Yahoo! JAPAN' App for iOS v3.2.2 to v4.109.0 contain a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the WebView of 'Yahoo! JAPAN' App via other app installed on the user's device.
Affected products
- LY Corporation 'Yahoo! JAPAN' App for Android: from v2.3.1 through v3.161.1
- LY Corporation 'Yahoo! JAPAN' App for iOS: from v3.2.2 through v4.109.0
References
Get alerted when CVE-2024-28895 or the next vulnerability affects your stack