CVE-2024-49418: Input Validation
Insufficient verification of url authenticity in GamingHub prior to version 6.1.03.4 in Korea, 7.1.02.4 in Global allows remote attackers to enable JavaScript in its webview.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49418?
CVE-2024-49418 is classified as a high severity vulnerability due to insufficient verification of URL authenticity.
How do I fix CVE-2024-49418?
To fix CVE-2024-49418, update GamingHub to version 6.1.03.4 or later for Korea or 7.1.02.4 or later for Global.
What type of attack can exploit CVE-2024-49418?
CVE-2024-49418 can be exploited by remote attackers to enable JavaScript in the webview, potentially leading to malicious activities.
Which versions of GamingHub are affected by CVE-2024-49418?
CVE-2024-49418 affects GamingHub versions prior to 6.1.03.4 for Korea and 7.1.02.4 for Global.
Is user data at risk due to CVE-2024-49418?
Yes, user data can be at risk because the vulnerability allows remote attackers to manipulate JavaScript execution within the app.