CVE-2023-21251

In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation

published July 12, 2023

CVSS
—
EPSS
0%
Percentile
13.5
In the wild
Unconfirmed
What it is

In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00234 · 13.5th percentile
Published
2023-07-12T23:32Z
EPSS history
Timeline
  • 12 JUL 23:32Z
    In onCreate of ConfirmDialog.java, there is a possible way to connect to VNP bypassing user's consent due to improper input validation
    cvelistv5