Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-21312
HistoryOct 30, 2023 - 5:15 p.m.

Design/Logic Flaw

2023-10-3017:15:00
PRIOn knowledge base
www.prio-n.com
1
intentresolver
cross-user
local disclosure
confused deputy
user interaction

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In IntentResolver, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androidlt14.0

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-21312