Lucene search
SamsungMobileCVELIST:CVE-2023-42580HistoryDec 05, 2023 - 2:44 a.m.
CVE-2023-42580
2023-12-0502:44:38
SamsungMobile
www.cve.org
2
cve-2023-42580
mcslaunch
deeplink
galaxy store
javascript api
install apk
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.001
Percentile
39.2%
Improper URL validation from MCSLaunch deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to install APK from Galaxy Store.
CNA Affected
[
{
"vendor": "Samsung Mobile",
"product": "Galaxy Store",
"versions": [
{
"status": "unaffected",
"version": "4.5.64.4"
}
],
"defaultStatus": "affected"
}
]Related
zdi
zdi
prion
prion
Input validation
2023-12-05 03:15:00
cve
cve
CVE-2023-42580
2023-12-05 03:15:19
nvd
nvd
CVE-2023-42580
2023-12-05 03:15:19
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.001
Percentile
39.2%
Related for CVELIST:CVE-2023-42580