← CVE Intelligence

CVE-2025-27388

Arbitrary URL Loading in WebView Leading to Token Leakage Risk PUBLISHED

Description (CNA)

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.

Affected (CNA)

Vendor / productVersions
OPPO / OPPO HEALTH APPaffected 4.23.4 and below through 4.23.4

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.