Lucene search
HistoryJul 06, 2023 - 3:15 a.m.
CVE-2023-30674
samsung internet
cve-2023-30674
samesite cookie
nvd
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.5%
Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.
Affected configurations
Node
samsunginternetRange<21.0.0.41
| CPE | Name | Operator | Version |
|---|---|---|---|
| samsung:internet | samsung internet | lt | 21.0.0.41 |
CNA Affected
[
{
"vendor": "Samsung Mobile",
"product": "Samsung Internet",
"versions": [
{
"status": "unaffected",
"version": "21.0.0.41"
}
],
"defaultStatus": "affected"
}
]Related
nvd
nvd
CVE-2023-30674
2023-07-06 03:15:12
prion
prion
Input validation
2023-07-06 03:15:00
cvelist
cvelist
CVE-2023-30674
2023-07-06 02:51:47
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
30.5%
Related for CVE-2023-30674