GSD-2023-20960 | Vulnetix

GSD-2023-20960 PUBLISHED CVSS 7.800000190734863 HIGH

Record from circl · Published July 18, 2022

In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper input validation. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12L Android-13Android ID: A-250589026

Risk scores

CVSS 3.1

7.800000190734863

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Versions
n/a	Android	*

Timeline

Jul 18, 2022 CVE Published

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GSD-2023-20960
vulnetix vdb fixes GSD-2023-20960

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GSD-2023-20960/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://source.android.com/security/bulletin/2023-03-01 url

Look up in the Resolve Platform →