CVE-2023-41827CWE-926
An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based…
Medium · published March 4, 2024
What it is
An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to inject an HTML-based message on screen UI.
The record
Technical detail
- CVSS v3.1
- 5.1 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00162 · 5.2th percentile
- Weakness
- CWE-926 · Improper Export of Android Application Components
- Published
- 2024-03-04T21:44Z
EPSS history
Timeline