The BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious app can cause service exceptions.
The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.
Link | Tags |
---|---|
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505 | vendor advisory |
https://consumer.huawei.com/en/support/bulletin/2023/3/ | vendor advisory |