Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-21279
HistoryAug 14, 2023 - 10:15 p.m.

Cross site scripting

2023-08-1422:15:00
PRIOn knowledge base
www.prio-n.com
3
cross site scripting
remoteviews.java
confused deputy
local information disclosure
no user interaction
nvd

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In visitUris of RemoteViews.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq12.0
androideq13.0
androideq12.1

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-21279