Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-21239
HistoryJul 13, 2023 - 12:15 a.m.

Information disclosure

2023-07-1300:15:00
PRIOn knowledge base
www.prio-n.com
1
information disclosure
visituris
notification.java
confused deputy
image data
user boundaries
nvd
exploitation

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In visitUris of Notification.java, there is a possible way to leak image data across user boundaries due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq12.0
androideq12.1
androideq13.0

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-21239