Appium base-driver <=10.6.0 - Reflected Cross-Site Scripting
Appium <= 10.7.0 contains a reflected XSS caused by unescaped reflection of throwError query parameter, comments POST field, and User-Agent header in base-driver routes, letting remote attackers execute arbitrary JavaScript, exploit requires crafted HTTP requests.
PoC 已收录Appium Base Driver
CVSS6.1EPSS 0.56%