CVE-2012-4012

CVE-2012-4012 describes a vulnerability in the WebView class of the Cybozu KUNAI application for Android, versions prior to 2.0.6. This flaw allows remote attackers to execute arbitrary JavaScript code and potentially obtain sensitive information. The attack requires a crafted application to place malicious code into a local file accessible via a file: URL. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with medium complexity, requiring no authentication, and primarily impacting confidentiality. While the EPSS score is low, suggesting a low probability of exploitation, the FAUCET Risk Score is 10/100. There is no evidence of active exploitation, nor are there known Metasploit, Nuclei, or ExploitDB modules available. Community discussion and media coverage for this CVE are minimal, with zero mentions or articles found.