Approved changes feed: RSS · Atom
cpe:2.3:a:govee:home:*:*:*:*:*:android:*:*
part: a version: * update: *
| Vendor | Govee (def27823-f4f0-58f4-ae60-af5a8f0ff29a) |
|---|---|
| Product | Home (ae850ddf-30bc-5e8d-ab9e-c912e1f7980d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | android |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-3612 |
vulnerable | 2026-06-08 06:09:40.013212 |
Unprotected WebView access in Govee Home App
HIGH (8.2)
Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content.
Published: 2023-09-11T09:04:09.924Z
Updated: 2024-09-26T14:32:25.277Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.