CVE-2017-17226
Medium
Description
The TripAdvisor app with the versions before TAMobileApp-24.6.4 pre-installed in some Huawei mobile phones have an arbitrary URL loading vulnerability due to insufficient input validation and improper configuration. An attacker may exploit this vulnerability to invoke TripAdvisor to load a specific URL and execute malicious code contained in the URL.
SeverityMedium
CVSS5.3
Exploit probability—
ProductTripadvisor Tamobileapp
PublishedMar 9, 2018
First seenMar 9, 2018
How to fix
Update
- tripadvisor tamobileapp24.6.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tripadvisor tamobileapp | v < 24.6.4 | 24.6.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.