CVEvulnerability
CVE-2023-21515
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-05-26
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-20
Description
InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
Affected configurations
• samsung galaxy store (< 4.5.49.8)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness