Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-21251
HistoryJul 13, 2023 - 12:15 a.m.

Input validation

2023-07-1300:15:00
PRIOn knowledge base
www.prio-n.com
input validation
confirmdialog
vnp bypassing
user consent
local escalation
user execution privileges
user interaction
exploitation
nvd

0.0004 Low

EPSS

Percentile

5.1%

In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user’s consent due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq13.0
androideq13.1

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-21251