NetSight
high8.8

CVE-2019-8792

An injection issue was addressed with improved validation.

Impact

An injection issue was addressed with improved validation. This issue is fixed in Shazam Android App Version 9.25.0, Shazam iOS App Version 12.11.0. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.

Affected products

VendorProductAffected versions
AppleShazam
Versions 9.25.0, 12.11.0

Weakness classification

References