Address Bar Spoofing in LINE Client for iOS
CVE-2021-36215

5.3MEDIUM

Key Information:

Vendor

Line Corporation

Status
Line Client For iOS
Vendor
CVE Published:
8 September 2021

What is CVE-2021-36215?

The LINE client for iOS versions up to 10.21.3 is susceptible to address bar spoofing, which arises from improper handling of addresses within the application. This vulnerability can potentially mislead users into believing they are interacting with a trusted environment, increasing the risk of phishing attacks and exposure to malicious content.

Affected Version(s)

LINE client for iOS <=

References

https://hackerone.com/reports/1082991
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.