Input validation

2024-03-0505:15:00

PRIOn knowledge base

www.prio-n.com

input validation

samsung internet

trusted web activities

local attackers

permission granting

nvd

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

Improper handling of granting permission for Trusted Web Activities in Samsung Internet prior to version 24.0.0.41 allows local attackers to grant permission to their own TWA WebApps without user interaction.

References

security.samsungmobile.com/serviceWeb.smsb?year=2024&month=03