CVE-2023-42581

Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data

High · published December 5, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
67.2
In the wild
Unconfirmed
What it is

Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01173 · 67.2th percentile
Published
2023-12-05T02:44Z
EPSS history
Timeline
  • 05 DEC 02:44Z
    Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data
    cvelistv5