The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause launcher module data to be modified.
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Link | Tags |
---|---|
https://consumer.huawei.com/en/support/bulletin/2022/11/ | vendor advisory |
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433 | vendor advisory |