Insufficient URL Restrictions in MinigameCenter Module by Vivo
CVE-2024-13185
6.3MEDIUM
What is CVE-2024-13185?
The MinigameCenter module from Vivo suffers from a flaw that allows for insufficient restrictions during URL loading. This vulnerability can potentially result in information leakage, posing a risk to user data and privacy. Organizations using this module should assess their exposure and consider implementing mitigations to protect sensitive information.
Affected Version(s)
MinigameCenter Versions below 2.3.5.0