VDB
CVE-2023-28203
CVE-2023-28203
PUBLISHED
CVSS 5.5 MEDIUM
The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts.
EPSS 0.20% · 8.3th percentile
Risk Scores
CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
0.20%
8.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| apple | music | 0, 0, 0 |
| Apple | Apple Music for Android | unspecified, * |
Timeline
- Jul 28, 2023 EPSS Score
- Jul 28, 2023 CVE Published
- Aug 31, 2023 EPSS Score
- Oct 4, 2023 EPSS Score
- Nov 8, 2023 EPSS Score
- Dec 12, 2023 EPSS Score
- Jan 15, 2024 EPSS Score
- Feb 18, 2024 EPSS Score
- Mar 24, 2024 EPSS Score
- Apr 27, 2024 EPSS Score
- May 31, 2024 EPSS Score
- Jul 4, 2024 EPSS Score