description: RushBet version 2022.23.1-b490616d allows a remote attacker to steal customer accounts via use of a malicious application. This is possible because the application exposes an activity and does not properly validate the data it receives.
problem types: Universal XSS
affected:
{
vendor: n/a
product: RushBet
versions:
version: 2022.23.1-b490616d, status: affected
}