2 matches found
PT-2023-17701 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a possible failure to persist permission settings due to resource exhaustion in the addPermission method of PermissionManagerServiceImpl.java. This could lead...
PT-2023-14470 · WordPress · Brutebank
Name of the Vulnerable Software and Affected Versions: BruteBank WordPress plugin versions prior to 1.9 Description: The issue concerns a lack of CSRF check when updating settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Recommendations: For versions...