Threats tagged 'ghsa-4v32-7h8r-xjwp'

A vulnerability in the iRA 2.0 and iRA.ev mobile applications arises from insufficient validation of URLs and origins loaded within their WebView components. This flaw allows a remote attacker to send malicious web content to the WebView, potentially enabling unauthorized interactions with the app, theft of live bearer authentication tokens, and user impersonation to access vehicle-related information and services.