Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-35668
HistoryDec 04, 2023 - 11:15 p.m.

Information disclosure

2023-12-0423:15:00
PRIOn knowledge base
www.prio-n.com
2
visituris
user
confused deputy
images
exploitation
nvd

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq12.1
androideq13.0

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-35668