CVEvulnerability
CVE-2020-25203
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-09-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:N
Description
The Framer Preview application 12 for Android exposes com.framer.viewer.FramerViewActivity to other applications. By calling the intent with the action set to android.intent.action.VIEW, any other application is able to load any website/web content into the application's context, which is shown as a full-screen overlay to the user.
Affected configurations
• framer framer preview 12.0
References
- http://packetstormsecurity.com/files/159264/Framer-Preview-12-Content-Injection.html Exploit, Third Party Advisory, VDB Entry
- https://rcesecurity.com Broken Link
- http://packetstormsecurity.com/files/159264/Framer-Preview-12-Content-Injection.html Exploit, Third Party Advisory, VDB Entry
- https://rcesecurity.com Broken Link