Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j2p8-g7vg-2chp

Опубликовано: 21 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545390

In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545390

EPSS

Процентиль: 18%
0.00058
Низкий

7.8 High

CVSS3

Дефекты

CWE-20
CWE-74

Связанные уязвимости

CVSS3: 7.8
nvd
около 3 лет назад

In getView of AddAppNetworksFragment.java, there is a possible way to mislead the user about network add requests due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224545390

EPSS

Процентиль: 18%
0.00058
Низкий

7.8 High

CVSS3

Дефекты

CWE-20
CWE-74