Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-4235 EUVD-2022-51593GHSA-2cfq-hfxh-5h78

RushBet version 2022.23.1-b490616d allows a remote attacker to steal customer accounts via use of a malicious application. This is possible…

Published Jan 18, 2023 · Updated Apr 3, 2025 · Assigned by Fluid Attacks

Description

RushBet version 2022.23.1-b490616d allows a remote attacker to steal customer accounts via use of a malicious application. This is possible because the application exposes an activity and does not properly validate the data it receives.

Affected products

VendorProductAffectedFixed
— RushBet 2022.23.1-b490616d —

References