Input validation

2023-12-0503:15:00

PRIOn knowledge base

www.prio-n.com

improper validation

url

galaxy store

javascript api

data access

nvd

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.3%

JSON

Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data.

CPENameOperatorVersion
galaxy_storelt4.5.64.4

CPE	Name	Operator	Version
	galaxy_store	lt	4.5.64.4

References

security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12