Oppo Health
Monthly
WebView URL injection in OPPO Health 6.2.9 enables token theft when a victim interacts with a maliciously crafted URL that loads inside the application's embedded WebView component. The CVSS 4.0 score of 8.3 reflects network-based delivery with low attack complexity, no required privileges, but mandatory active user interaction, with high confidentiality impact on both the vulnerable and subsequent systems. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog.
WebView URL injection in OPPO Health 6.2.9 enables token theft when a victim interacts with a maliciously crafted URL that loads inside the application's embedded WebView component. The CVSS 4.0 score of 8.3 reflects network-based delivery with low attack complexity, no required privileges, but mandatory active user interaction, with high confidentiality impact on both the vulnerable and subsequent systems. No public exploit code has been identified at time of analysis, and this CVE does not appear in the CISA KEV catalog.