Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j6ch-qp42-33gr

Опубликовано: 13 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 0%
0.00003
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-281

Связанные уязвимости

CVSS3: 5.5
nvd
больше 2 лет назад

In multiple functions of OneTimePermissionUserManager.java, there is a possible one-time permission retention due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

EPSS

Процентиль: 0%
0.00003
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-281