deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-39357
Published: 2023-09-05
Description: Cacti is an open source operational monitoring and fault management framework. A defect in the sql_save function was discovered. When the column type is numeric, the sql_save function directly utilizes user input. Many files and functions calling the sql_save function do not perform prior validation of user input, leading to the existence of multiple SQL injection vulnerabilities in Cacti. This allows authenticated users to exploit these SQL injection vulnerabilities to perform privilege escalation and remote code execution. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20, CWE-89, CWE-89
References: https://github.com/Cacti/cacti/security/advisories/GHSA-6jhp-mgqg-fhqg; https://lists.debian.org/debian-lts-announce/2024/03/msg00018.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/
CVE: CVE-2023-39358
Published: 2023-09-05
Description: Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in the `reports_user.php` file. In `ajax_get_branches`, the `tree_id` parameter is passed to the `reports_get_branch_select` function without any validation. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/Cacti/cacti/security/advisories/GHSA-gj95-7xr8-9p7g; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WOQFYGLZBAWT4AWNMO7DU73QXWPXTCKH/
CVE: CVE-2023-39362
Published: 2023-09-05
Description: Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions, an authenticated privileged user, can use a malicious string in the SNMP options of a Device, performing command injection and obtaining remote code execution on the underlying server. The `lib/snmp.php` file has a set of functions, with similar behavior, that accept in input some variables and place them into an `exec` call without a proper escape or validation. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78, CWE-77
References: http://packetstormsecurity.com/files/175029/Cacti-1.2.24-Command-Injection.html; https://github.com/Cacti/cacti/security/advisories/GHSA-g6ff-58cj-x3cp; https://lists.debian.org/debian-lts-announce/2024/03/msg00018.html
CVE: CVE-2023-39364
Published: 2023-09-05
Description: Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, users with console access can be redirected to an arbitrary website after a change password performed via a specifically crafted URL. The `auth_changepassword.php` file accepts `ref` as a URL parameter and reflects it in the form used to perform the change password. It's value is used to perform a redirect via `header` PHP function. A user can be tricked in performing the change password operation, e.g., via a phishing message, and then interacting with the malicious website where the redirection has been performed, e.g., downloading malwares, providing credentials, etc. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-601
References: https://github.com/Cacti/cacti/security/advisories/GHSA-4pjv-rmrp-r59x; https://lists.debian.org/debian-lts-announce/2024/03/msg00018.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/
CVE: CVE-2023-39365
Published: 2023-09-05
Description: Cacti is an open source operational monitoring and fault management framework. Issues with Cacti Regular Expression validation combined with the external links feature can lead to limited SQL Injections and subsequent data leakage. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/Cacti/cacti/security/advisories/GHSA-v5w7-hww7-2f22; https://lists.debian.org/debian-lts-announce/2024/03/msg00018.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/
CVE: CVE-2023-39516
Published: 2023-09-05
Description: Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability which allows an authenticated user to poison data stored in the _cacti_'s database. These data will be viewed by administrative _cacti_ accounts and execute JavaScript code in the victim's browser at view-time. The script under `data_sources.php` displays the data source management information (e.g. data source path, polling configuration etc.) for different data visualizations of the _cacti_ app. CENSUS found that an adversary that is able to configure a malicious data-source path, can deploy a stored XSS attack against any user of the same (or broader) privileges. A user that possesses the 'General Administration>Sites/Devices/Data' permissions can configure the data source path in Cacti. This configuration occurs through `http://<HOST>/cacti/data_sources.php`. The same page can be used for previewing the data source path. This issue has been addressed in version 1.2.25. Users are advised to upgrade. Users unable to upgrade should manually escape HTML output.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Cacti/cacti/security/advisories/GHSA-r8qq-88g3-hmgv; https://lists.debian.org/debian-lts-announce/2024/03/msg00018.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CFH3J2WVBKY4ZJNMARVOWJQK6PSLPHFH/
CVE: CVE-2023-41507
Published: 2023-09-05
Description: Super Store Finder v3.6 was discovered to contain multiple SQL injection vulnerabilities in the store locator component via the products, distance, lat, and lng parameters.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/redblueteam/CVE-2023-41507/; https://superstorefinder.net/support/forums/topic/super-store-finder-patch-notes/; https://github.com/redblueteam/CVE-2023-41507/
CVE: CVE-2023-4761
Published: 2023-09-05
Description: Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html; https://crbug.com/1476403; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/
CVE: CVE-2023-4762
Published: 2023-09-05
Description: Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html; https://crbug.com/1473247; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/
CVE: CVE-2023-4763
Published: 2023-09-05
Description: Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html; https://crbug.com/1469928; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/
CVE: CVE-2023-4764
Published: 2023-09-05
Description: Incorrect security UI in BFCache in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 6.5 (MEDIUM)
References: https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html; https://crbug.com/1447237; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/
CVE: CVE-2023-4487
Published: 2023-09-05
Description: 
GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious configuration files in the expected web server execution path to escalate privileges and gain full control of the HMI software.


CVSS Score: 7.8 (HIGH)
CWE: CWE-114
References: https://digitalsupport.ge.com/s/article/GE-Digital-CIMPLICITY-Privilege-Escalation-Vulnerability; https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-02; https://digitalsupport.ge.com/s/article/GE-Digital-CIMPLICITY-Privilege-Escalation-Vulnerability
CVE: CVE-2023-4485
Published: 2023-09-06
Description: ARDEREG ​Sistema SCADA Central versions 2.203 and prior
login page are vulnerable to an unauthenticated blind SQL injection attack. An attacker could manipulate the application's SQL query logic to extract sensitive information or perform unauthorized actions within the database. In this case, the vulnerability could allow an attacker to execute arbitrary SQL queries through the login page, potentially leading to unauthorized access, data leakage, or even disruption of critical industrial processes.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-01; https://www.cisa.gov/news-events/ics-advisories/icsa-23-243-01
CVE: CVE-2022-32920
Published: 2023-09-06
Description: The issue was addressed with improved checks. This issue is fixed in Xcode 14.0. Parsing a file may lead to disclosure of user information.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213883; https://support.apple.com/en-us/HT213883
CVE: CVE-2023-27950
Published: 2023-09-06
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. Processing an image may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-28187
Published: 2023-09-06
Description: This issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.3. A user may be able to cause a denial-of-service.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-28188
Published: 2023-09-06
Description: A denial-of-service issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3. A remote user may be able to cause a denial-of-service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-28195
Published: 2023-09-06
Description: A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3. An app may be able to read sensitive location information.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-28208
Published: 2023-09-06
Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/en-us/HT213605; https://support.apple.com/en-us/HT213606; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-28209
Published: 2023-09-06
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-28210
Published: 2023-09-06
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-28211
Published: 2023-09-06
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-28212
Published: 2023-09-06
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-28213
Published: 2023-09-06
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-28214
Published: 2023-09-06
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-28215
Published: 2023-09-06
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-29166
Published: 2023-09-06
Description: A logic issue was addressed with improved state management. This issue is fixed in Pro Video Formats 2.2.5. A user may be able to elevate privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT213882; https://support.apple.com/en-us/HT213882
CVE: CVE-2023-32356
Published: 2023-09-06
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-120
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-32362
Published: 2023-09-06
Description: Error handling was changed to not reveal sensitive information. This issue is fixed in macOS Ventura 13.3. A website may be able to track sensitive user information.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-32370
Published: 2023-09-06
Description: A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail.
CVSS Score: 5.3 (MEDIUM)
References: http://www.openwall.com/lists/oss-security/2023/09/11/1; https://security.gentoo.org/glsa/202401-04; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-32379
Published: 2023-09-06
Description: A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.4. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213758; https://support.apple.com/kb/HT213758; https://support.apple.com/en-us/HT213758
CVE: CVE-2023-32425
Published: 2023-09-06
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213764; https://support.apple.com/kb/HT213757
CVE: CVE-2023-32426
Published: 2023-09-06
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT213670; https://support.apple.com/kb/HT213670; https://support.apple.com/en-us/HT213670
CVE: CVE-2023-32428
Published: 2023-09-06
Description: This issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213761
CVE: CVE-2023-32432
Published: 2023-09-06
Description: A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to access user-sensitive data.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213761
CVE: CVE-2023-32438
Published: 2023-09-06
Description: This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in tvOS 16.3, macOS Ventura 13.2, watchOS 9.3, iOS 16.3 and iPadOS 16.3. An app may be able to bypass Privacy preferences.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213599; https://support.apple.com/en-us/HT213601; https://support.apple.com/en-us/HT213605
CVE: CVE-2023-34352
Published: 2023-09-06
Description: A permissions issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An attacker may be able to leak user account emails.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276
References: https://support.apple.com/en-us/HT213757; https://support.apple.com/en-us/HT213758; https://support.apple.com/en-us/HT213761
CVE: CVE-2023-4719
Published: 2023-09-06
Description: The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `list_type` parameter in versions up to, and including, 4.3.5 due to insufficient input sanitization and output escaping. Using this vulnerability, unauthenticated attackers could inject arbitrary web scripts into pages that are being executed if they can successfully trick a user into taking an action, such as clicking a malicious link.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2962730%40simple-membership&new=2962730%40simple-membership&sfp_email=&sfph_mail=; https://wordpress.org/plugins/simple-membership/; https://www.wordfence.com/threat-intel/vulnerabilities/id/e4b10172-7e54-4ff8-9fbb-41d160ce49e4?source=cve
CVE: CVE-2023-30706
Published: 2023-09-06
Description: Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with system privilege.
CVSS Score: 7.5 (HIGH)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09
CVE: CVE-2023-30707
Published: 2023-09-06
Description: Improper input validation vulnerability in FileProviderStatusReceiver in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows local attackers to delete arbitrary files with Samsung Keyboard privilege.
CVSS Score: 4.0 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09
CVE: CVE-2023-30708
Published: 2023-09-06
Description: Improper authentication in SecSettings prior to SMR Sep-2023 Release 1 allows attacker to access Captive Portal Wi-Fi in Reactivation Lock status.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09
CVE: CVE-2023-30709
Published: 2023-09-06
Description: Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege.
CVSS Score: 7.9 (HIGH)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09
CVE: CVE-2023-30710
Published: 2023-09-06
Description: Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities.
CVSS Score: 8.5 (HIGH)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09
CVE: CVE-2023-30711
Published: 2023-09-06
Description: Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider.
CVSS Score: 4.0 (MEDIUM)
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09
CVE: CVE-2023-30712
Published: 2023-09-06
Description: Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09
CVE: CVE-2023-30713
Published: 2023-09-06
Description: Improper privilege management vulnerability in FolderLockNotifier in One UI Home prior to SMR Sep-2023 Release 1 allows local attackers to change some settings of the folder lock.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-269
References: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09; https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09