Unscored CVE-2015-5632 EUVD-2015-5584GHSA-8jh9-j7fw-7cmj

The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whi…

Published Sep 20, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors.

References

http://jvn.jp/en/jp/JVN73346595/995707/index.html
JVN#73346595 third-party-advisory
JVNDB-2015-000130 third-party-advisory