PT-2023-22875 · Google · Android

Hackhackdump · Publicado 2023-07-06 · Atualizado 2023-07-13 · CVE-2023-30678

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Calendar application versions prior to 12.4.07.15

Description The issue allows attackers to write arbitrary files due to a potential zip path traversal vulnerability in the Calendar application. This vulnerability is present in Android 13.

Recommendations For versions prior to 12.4.07.15, update to version 12.4.07.15 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-30678

Produtos afetados

Android

Referências · 6

• https://t.me/cibsecurity/66053 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-30678 · Nota de Segurança
• https://t.me/cvenotify/53704 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-30678 · Aviso do Fabricante
• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07 · Aviso do Fabricante
• https://t.me/cvenotify/53731 · Publicação no Telegram