exploitDog

CVE-2023-29722

Опубликовано: 01 июн. 2023

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack.

Ссылки

https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29722/CVE%20detail.md
Exploit
Third Party Advisory
https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29722/CVE%20detail.md
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:glitter_unicorn_wallpaper_project:glitter_unicorn_wallpaper:*:*:*:*:*:android:*:*

Версия от 7.0 (включая) до 8.0 (включая)

EPSS

Процентиль: 29%

0.00104

Низкий

9.1 Critical

CVSS3

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-79mh-hvr9-8rpv

CVSS3: 9.1

github

больше 2 лет назад

The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack.

EPSS

Процентиль: 29%

0.00104

Низкий

9.1 Critical

CVSS3

Дефекты

NVD-CWE-noinfo