CAPEC-503 WebView Exposure
abstraction: standardstatus: activeAn adversary, through a malicious web page, accesses application specific functionality by leveraging interfaces registered through WebView's addJavascriptInterface API. Once an interface is registered to WebView through addJavascriptInterface, it becomes global and all pages loaded in the WebView can call this interface.
01
weaknesses (1)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (1)
Related entries.
03
source
Where this definition is published.