Vulnerability · Published Sep 11, 2020 · Assigned by microsoft
CVE-2020-16873Xamarin.Forms Spoofing Vulnerability
Medium 4.7
In plain English
A medium-severity security flaw in xamarin.forms from Microsoft. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.0% (higher than 91% of all known vulnerabilities).
Official description
<p>A spoofing vulnerability manifests in Microsoft Xamarin.Forms due to the default settings on Android WebView version prior to 83.0.4103.106. This vulnerability could allow an attacker to execute arbitrary Javascript code on a target system.</p> <p>For the attack to be successful, the targeted user would need to browse to a malicious website or a website serving the malicious code through Xamarin.Forms.</p> <p>The security update addresses this vulnerability by preventing the malicious Javascript from running in the WebView.</p>
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | xamarin.forms | 83.0.0 – before publication |