Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-21105
HistoryJun 15, 2023 - 7:15 p.m.

Design/Logic Flaw

2023-06-1519:15:00
PRIOn knowledge base
www.prio-n.com
4
cross-user media read
chooseractivity
confused deputy
local information disclosure
android-11
android-12
android-12l
android-13
a-261036568
nvd

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-261036568

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq12.1
androideq13.0

5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-21105