Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Newphoria applican框架权限许可和访问控制漏洞
Vulnerability Description
Newphoria applican framework for Android和iOS是日本Newphoria公司的一套基于Android和iOS平台的应用程序开发框架。 Newphoria applican框架的runtime引擎中存在安全漏洞。攻击者可利用该漏洞绕过whitelist.xml URL白名单保护机制，获取API访问权限。以下版本受到影响：基于Android平台的Newphoria applican框架1.12.3之前版本，基于iOS平台的Newphoria applican框架1.12
CVSS Information
N/A
Vulnerability Type
N/A