CVE-2023-6913

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView without prompting or displaying it to the user. This vulnerability could trigger phishing attacks.

• CWE-384

• https://www.incibe.es/en/incibe-cert/notices/aviso/session-hijacking-imou-life-appThird Party Advisory
• https://www.incibe.es/en/incibe-cert/notices/aviso/session-hijacking-imou-life-appThird Party Advisory

Published

Dec 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6907A vulnerability has been found in codelyfe Stupid Simple CMS…9.1
• CVE-2023-6908A vulnerability, which was classified as problematic, was fo…5.9
• CVE-2023-6909Path Traversal: '\..\filename' in GitHub repository mlflow/m…7.5
• CVE-2023-6910A vulnerable API method in M-Files Server before 23.12.13195…6.5
• CVE-2023-6911Multiple WSO2 products have been identified as vulnerable du…4.8
• CVE-2023-6912Lack of protection against brute force attacks in M-Files Se…9.8
• CVE-2023-6915A Null pointer dereference problem was found in ida_free in …5.5
• CVE-2023-6916Audit records for OpenAPI requests may include sensitive inf…7.5
• CVE-2023-6917A vulnerability has been identified in the Performance Co-Pi…6.7
• CVE-2023-6918A flaw was found in the libssh implements abstract layer for…5.3
• CVE-2023-6919Path Traversal: '/../filedir' vulnerability in Biges Safe Li…7.5
• CVE-2023-6920Rejected reason: This flaw was found to be a duplicate of CV…