Lucene search

MitreCVE-2023-29755

HistoryJun 09, 2023 - 8:15 p.m.

CVE-2023-29755

2023-06-0920:15:09

mitre

web.nvd.nist.gov

twilight

android

cve-2023-29755

security vulnerability

unauthorized apps

escalation of privilege

sharedpreference files

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

29.2%

JSON

An issue found in Twilight v.13.3 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the SharedPreference files.

Affected configurations

Nvd

Node

urbanandroidtwilightMatch13.3android

VendorProductVersionCPE
urbanandroidtwilight13.3cpe:2.3:a:urbanandroid:twilight:13.3:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
urbanandroid	twilight	13.3	cpe:2.3:a:urbanandroid:twilight:13.3:::::android::

References

github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29755/CVE%20detailed.md

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

29.2%

JSON

Related for CVE-2023-29755