Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Malicious Package
Vulnerability Description
This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functionality that acts as a backdoor. Mintegral and their partners (advertisers) can remotely execute arbitrary code on a user device.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
Vulnerability Type
N/A
Vulnerability Title
mintegral MintegralAdSDK 代码注入漏洞
Vulnerability Description
mintegral MintegralAdSDK是中国广州汇世信息科技有限公司（mintegral）公司的一个应用于移动平台广告接入的SDK。该 SDK 可使开发者获得来自 Mintegral 的广告平台的亚太广告资源，来获取流量收益。 MintegralAdSDK 6.6.0.0 之前版本存在安全漏洞，该漏洞源于公司发布的SDK包含恶意功能，就像一个后门。Mintegral和他们的合作伙伴(广告商)可以在用户设备上远程执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A