Lucene search

PRIOn knowledge basePRION:CVE-2023-21288

HistoryAug 14, 2023 - 10:15 p.m.

Information disclosure

2023-08-1422:15:00

PRIOn knowledge base

www.prio-n.com

information disclosure

visituris

local

user execution privileges

user interaction

exploitation

nvd

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In visitUris of Notification.java, there is a possible way to reveal images across users due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq13.0
androideq12.1

Name	Operator	Version
android	eq	11.0
android	eq	12.0
android	eq	13.0
android	eq	12.1

References

android.googlesource.com/platform/frameworks/base/+/726247f4f53e8cc0746175265652fa415a123c0c

source.android.com/security/bulletin/2023-08-01