Approved changes feed: RSS · Atom

cpe:2.3:a:redbull:fc_red_bull_salzburg:*:*:*:*:*:android:*:*

part: a version: * update: *

VendorRedbull (bcf0a56f-c6d6-5a8f-9dab-8267c4582344)
ProductFc Red Bull Salzburg (c5e4fcf3-ee42-5591-9001-08a923eddabd)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29459 vulnerable 2026-06-08 06:02:40.282713 Details available
The laola.redbull application through 5.1.9-R for Android exposes the exported activity at.redbullsalzburg.android.AppMode.Default.Splash.SplashActivity, which accepts a data: URI. The target of this URI is subsequently loaded into the application's webview, thus allowing the loading of arbitrary content into the context of the application. This can occur via the fcrbs schema or an explicit intent invocation.
Published: 2023-06-26T00:00:00.000Z
Updated: 2024-12-03T19:05:17.677Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.