CVE-2020-25203

The Framer Preview application 12 for Android exposes com.framer.viewer.FramerViewActivity to other applications. By calling the intent with the action set to android.intent.action.VIEW, any other application is able to load any website/web content into the application's context, which is shown as a full-screen overlay to the user.

CVSS v3 5.5 MEDIUM
CVSS v2.0 1.9 LOW

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

1.9^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 3.4 / Impact : 2.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://packetstormsecurity.com/files/159264/Framer-Preview-12-Content-Injection.html	Exploit Third Party Advisory VDB Entry
https://rcesecurity.com	Broken Link

Configurations

Configuration 1 (hide)

cpe:2.3:a:framer:framer_preview:12.0:*:*:*:*:android:*:*

History

No history.

Information

Published : 2020-09-25 04:23

Updated : 2024-02-28 18:08

NVD link : CVE-2020-25203

Mitre link : CVE-2020-25203

CVE.ORG link : CVE-2020-25203

JSON object : View

Products Affected

framer

framer_preview

CWE

NVD-CWE-Other

{"id": "CVE-2020-25203", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2020-09-25T04:23:04.763", "references": [{"url": "http://packetstormsecurity.com/files/159264/Framer-Preview-12-Content-Injection.html", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "https://rcesecurity.com", "tags": ["Broken Link"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The Framer Preview application 12 for Android exposes com.framer.viewer.FramerViewActivity to other applications. By calling the intent with the action set to android.intent.action.VIEW, any other application is able to load any website/web content into the application's context, which is shown as a full-screen overlay to the user."}, {"lang": "es", "value": "La aplicaci\u00f3n Framer Preview versi\u00f3n 12 para Android, expone com.framer.viewer.FramerViewActivity a otras aplicaciones. Al llamar el intent con la acci\u00f3n establecida en android.intent.action.VIEW, cualquier otra aplicaci\u00f3n es capaz de cargar cualquier sitio web y contenido web en el contexto de la aplicaci\u00f3n, que es mostrada como una superposici\u00f3n de pantalla completa para el usuario"}], "lastModified": "2020-10-06T19:58:07.013", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:framer:framer_preview:12.0:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "2F99EFF4-3E72-46B1-9FA6-0BC1374CEF70"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}