> SAP Emarsys SDK for Android Sensitive Data Leak (CVE-2023-6542)

[SOURCE] RCE Security [AUTHOR: Julien Ahrens] [DATE: 10/04/2025 09:37] [LANGUAGE: EN]

In late 2023, we’ve discovered and coordinated a quite interesting vulnerability affecting the Emarsys SDK for Android versions 3.6.1 and below with the respective vendor, SAP. While the overall coordination process went smoothly, the security advisory published by SAP only had a brief and partially misleading description of the vulnerability: Due to the lack of […]

[messages.read_original_source] →