Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-40135
HistoryOct 27, 2023 - 9:15 p.m.

Information disclosure

2023-10-2721:15:00
PRIOn knowledge base
www.prio-n.com
3
applycustomdescription saveui.java information disclosure confused deputy local exploitation

3.7 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

In applyCustomDescription of SaveUi.java, there is a possible way to view another user’s images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
androideq11.0
androideq12.0
androideq12.1
androideq13.0

3.7 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for PRION:CVE-2023-40135