Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-21306
HistoryOct 30, 2023 - 5:15 p.m.

Information disclosure

2023-10-3017:15:00
PRIOn knowledge base
www.prio-n.com
1
contentservice
information disclosure
sync content providers
side channel
local disclosure
execution privileges
user interaction

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In ContentService, there is a possible way to read installed sync content providers due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androidlt14.0

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-21306