Lucene search

K
vulnrichmentGoogle_androidVULNRICHMENT:CVE-2023-35680
HistorySep 11, 2023 - 8:09 p.m.

CVE-2023-35680

2023-09-1120:09:54
google_android
github.com
1
confused deputy
local information disclosure
user interaction

AI Score

6.2

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In multiple locations, there is a possible way to import contacts belonging to other users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Score

6.2

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-35680