CVE-2021-23863

https://notcve.org/view.php?id=CVE-2021-23863

28 Jan 2022 — HTML code injection vulnerability in Android Application, Bosch Video Security, version 3.2.3. or earlier, when successfully exploited allows an attacker to inject random HTML code into a component loaded by WebView, thus allowing the Application to display web resources controlled by the attacker. Una vulnerabilidad de inyección de código HTML en la aplicación Android, Bosch Video Security, versiones 3.2.3. o anteriores, cuando es explotado con éxito permite a un atacante inyectar código HTML aleatorio en ... • https://psirt.bosch.com/security-advisories/bosch-sa-844050-bt.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •