Description (CNA)
Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor notification.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Siber Systems, Inc. / Android App "RoboForm Password Manager" | affected 9.8.6.3 and prior |
CWE
CWE-357
References
- https://play.google.com/store/apps/details?id=com.siber.roboform
- https://www.roboform.com/news-android
- https://jvn.jp/en/vu/JVNVU93461473/
ADP enrichment
No English description supplied.
No references supplied.