Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4334-98hj-rq43

Опубликовано: 30 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 4.8

Описание

Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges.  After multiple attempts to contact the vendor we did not receive any answer. We suppose this issue affects all Infinix Mobile devices.

Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges.  After multiple attempts to contact the vendor we did not receive any answer. We suppose this issue affects all Infinix Mobile devices.

EPSS

Процентиль: 15%
0.00048
Низкий

4.8 Medium

CVSS4

Дефекты

CWE-497

Связанные уязвимости

nvd
около 1 года назад

Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges.  After multiple attempts to contact the vendor we did not receive any answer. We suppose this issue affects all Infinix Mobile devices.

EPSS

Процентиль: 15%
0.00048
Низкий

4.8 Medium

CVSS4

Дефекты

CWE-497