Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-45774
HistoryDec 04, 2023 - 11:15 p.m.

Privilege escalation

2023-12-0423:15:00
PRIOn knowledge base
www.prio-n.com
3
privilege escalation
shortcutservice
fixupincomingshortcutinfo
local
vulnerability
user image

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In fixUpIncomingShortcutInfo of ShortcutService.java, there is a possible way to view another user’s image due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-45774