CVE-2023-29727

Katalog CVE

CVSS 9.8 · Critical EPSS 1,2%

Kerentanan Insecure Storage of Sensitive Information pada applika call blocker. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The Call Blocker application 6.6.3 for Android allows unauthorized applications to use exposed components to delete data stored in its database that is related to user privacy settings and affects the implementation of the normal functionality of the application. An attacker can use this to cause an escalation of privilege attack.

Rincian

Terbit di NVD

30 Mei 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-922: Insecure Storage of Sensitive Information

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 67,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29727/CVE%20detail.md exploit · advisory pihak ketiga
• https://play.google.com/store/apps/details?id=com.cuiet.blockCalls product
• https://www.call-blocker.info/ product