Lucene search

K
osvGoogleOSV:ASB-A-289242655
HistoryNov 01, 2023 - 12:00 a.m.

Work Profile Messages app having access to personal messages (1)

2023-11-0100:00:00
Google
osv.dev
6
personal messages
data access
information disclosure
missing permission check
cross-user
local data
no user interaction
software

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

In multiple locations, there is a possible way for apps to access cross-user message data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for OSV:ASB-A-289242655