PT-2023-1763 · Microsoft · Office For Android

Dimitrios Valsamaras · Published 2023-03-14 · Updated 2026-05-22 · CVE-2023-23391

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Office for Android (affected versions not specified)

Description The issue is related to errors in the representation of information by the user interface. Exploitation of this issue may allow an attacker to conduct spoofing attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

UI Misrepresentation of Critical Information

Relative Path Traversal

Weakness Enumeration

CWE-451

CWE-23

Related Identifiers

BDU:2023-01358

CVE-2023-23391

Affected Products

Office For Android

References · 8

• https://bdu.fstec.ru/vul/2023-01358 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23391 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-23391 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23391 · Security Note
• https://t.me/cveNotify/164582 · Telegram Post
• https://t.me/cvenotify/46137 · Telegram Post
• https://t.me/cvenotify/81312 · Telegram Post
• https://t.me/cibsecurity/59993 · Telegram Post