deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-41272
Published: 2022-12-13
Description: An unauthenticated attacker over the network can attach to an open interface exposed through JNDI by the User Defined Search (UDS) of SAP NetWeaver Process Integration (PI) - version 7.50 and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and data across the entire system. This allows the attacker to have full read access to user data, make limited modifications to user data, and degrade the performance of the system, leading to a high impact on confidentiality and a limited impact on the availability and integrity of the application.

CVSS Score: 9.9 (CRITICAL)
CWE: CWE-89, CWE-306, CWE-862, CWE-862
References: https://launchpad.support.sap.com/#/notes/3273480; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3273480
CVE: CVE-2022-41273
Published: 2022-12-13
Description: Due to improper input sanitization in SAP Sourcing and SAP Contract Lifecycle Management - version 1100, an attacker can redirect a user to a malicious website. In order to perform this attack, the attacker sends an email to the victim with a manipulated link that appears to be a legitimate SAP Sourcing URL, since the victim doesn’t suspect the threat, they click on the link, log in to SAP Sourcing and CLM and at this point, they get redirected to a malicious website.            
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601
References: https://launchpad.support.sap.com/#/notes/3270399; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3270399
CVE: CVE-2022-41274
Published: 2022-12-13
Description: SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can lead to the exposure of data like financial reports.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-863, CWE-863
References: https://launchpad.support.sap.com/#/notes/3266846; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3266846
CVE: CVE-2022-41275
Published: 2022-12-13
Description: In SAP Solution Manager (Enterprise Search) - versions 740, and 750, an unauthenticated attacker can generate a link that, if clicked by a logged-in user, can be redirected to a malicious page that could read or modify sensitive information, or expose the user to a phishing attack, with little impact on confidentiality and integrity.

CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://launchpad.support.sap.com/#/notes/3271313; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3271313
CVE: CVE-2022-23473
Published: 2022-12-13
Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.148, Authorizations are not properly verified when accessing MediaWiki standalone resources. Users with read only permissions for pages are able to also edit them. This only affects the MediaWiki standalone plugin. This issue is patched in versions Tuleap Community Edition 14.2.99.148, Tuleap Enterprise Edition 14.2-5, and Tuleap Enterprise Edition 14.1-6.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://github.com/Enalean/tuleap/security/advisories/GHSA-c7rr-5vmc-rgcw; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=97cac78302170a883c1d60c9fa6dfd0d95854cb9; https://tuleap.net/plugins/tracker/?aid=29645
CVE: CVE-2022-41915
Published: 2022-12-13
Description: Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior to 4.1.86.Final, when calling `DefaultHttpHeadesr.set` with an _iterator_ of values, header value validation was not performed, allowing malicious header values in the iterator to perform HTTP Response Splitting. This issue has been patched in version 4.1.86.Final. Integrators can work around the issue by changing the `DefaultHttpHeaders.set(CharSequence, Iterator<?>)` call, into a `remove()` call, and call `add()` in a loop over the iterator of values.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-113, CWE-436, CWE-436
References: https://github.com/netty/netty/commit/fe18adff1c2b333acb135ab779a3b9ba3295a1c4; https://github.com/netty/netty/issues/13084; https://github.com/netty/netty/pull/12760
CVE: CVE-2022-46160
Published: 2022-12-13
Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.104, project level authorizations are not properly verified when accessing the project "homepage"/dashboards. Users not authorized to access a project may still be able to get some information provided by the widgets (e.g. number of members, content of the Notes widget...). This issue has been patched in Tuleap Community Edition 14.2.99.104, Tuleap Enterprise Edition 14.2-4, and Tuleap Enterprise Edition 14.1-5. 
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-863
References: https://github.com/Enalean/tuleap/security/advisories/GHSA-hjhc-xqjh-9fv3; https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&h=0910a7b0ce14763e5c388be6ca4bcfd1c675c5d8; https://tuleap.net/plugins/tracker/?aid=29642
CVE: CVE-2022-23505
Published: 2022-12-13
Description: Passport-wsfed-saml2 is a ws-federation protocol and SAML2 tokens authentication provider for Passport. In versions prior to 4.6.3, a remote attacker may be able to bypass WSFed authentication on a website using passport-wsfed-saml2. A successful attack requires that the attacker is in possession of an arbitrary IDP signed assertion. Depending on the IDP used, fully unauthenticated attacks (e.g without access to a valid user) might also be feasible if generation of a signed message can be triggered. This issue is patched in version 4.6.3. Use of SAML2 authentication instead of WSFed is a workaround.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://github.com/auth0/passport-wsfed-saml2/security/advisories/GHSA-ppjq-qxhx-m25f; https://github.com/auth0/passport-wsfed-saml2/security/advisories/GHSA-ppjq-qxhx-m25f
CVE: CVE-2022-23523
Published: 2022-12-13
Description: In versions prior to 0.8.1, the linux-loader crate uses the offsets and sizes provided in the ELF headers to determine the offsets to read from. If those offsets point beyond the end of the file this could lead to Virtual Machine Monitors using the `linux-loader` crate entering an infinite loop if the ELF header of the kernel they are loading was modified in a malicious manner. This issue has been addressed in 0.8.1. The issue can be mitigated by ensuring that only trusted kernel images are loaded or by verifying that the headers do not point beyond the end of the file.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-119, CWE-125
References: https://github.com/rust-vmm/linux-loader/pull/125; https://github.com/rust-vmm/linux-loader/security/advisories/GHSA-52h2-m2cf-9jh6; https://github.com/rust-vmm/linux-loader/pull/125
CVE: CVE-2022-4098
Published: 2022-12-13
Description: Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in to the WBM of the Com-Server an unauthenticated attacker in the same subnet can obtain the session ID and through IP spoofing change arbitrary settings by crafting modified HTTP Get requests. This may result in a complete takeover of the device.
CVSS Score: 8.0 (HIGH)
CWE: CWE-290
References: https://cert.vde.com/en/advisories/VDE-2022-057/; https://cert.vde.com/en/advisories/VDE-2022-057/
CVE: CVE-2022-4444
Published: 2022-12-13
Description: A vulnerability was found in ipti br.tag. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 2.13.0 is able to address this issue. The name of the patch is 7e311be22d3a0a1b53e61cb987ba13d681d85f06. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-215431.
CVSS Score: 3.5 (LOW)
CWE: CWE-707, CWE-79
References: https://github.com/ipti/br.tag/commit/7e311be22d3a0a1b53e61cb987ba13d681d85f06; https://github.com/ipti/br.tag/pull/131; https://vuldb.com/?id.215431
CVE: CVE-2022-4446
Published: 2022-12-13
Description: PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-98, CWE-669
References: https://github.com/tsolucio/corebos/commit/8035e725ecb397348bd50545e90975b699e4f9f2; https://huntr.dev/bounties/718f1be6-3834-4ef2-8134-907a52009894; https://github.com/tsolucio/corebos/commit/8035e725ecb397348bd50545e90975b699e4f9f2
CVE: CVE-2022-38124
Published: 2022-12-13
Description: Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-267, CWE-269
References: https://www.secomea.com/support/cybersecurity-advisory/; https://www.secomea.com/support/cybersecurity-advisory/
CVE: CVE-2022-46047
Published: 2022-12-13
Description: AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/categories_delete_sql_injection/categories_delete_sql_injection.md; https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/categories_delete_sql_injection/categories_delete_sql_injection.md
CVE: CVE-2022-46058
Published: 2022-12-13
Description: AeroCMS v0.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-XSS/add_post_post_content/add_post_post_content.md; https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-XSS/add_post_post_content/add_post_post_content.md
CVE: CVE-2022-46061
Published: 2022-12-13
Description: AeroCMS v0.0.1 is vulnerable to ClickJacking.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-1021, CWE-1021
References: https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-ClickJacking/registration_ClickJacking/registration_ClickJacking.md; https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-ClickJacking/registration_ClickJacking/registration_ClickJacking.md
CVE: CVE-2021-32415
Published: 2022-12-13
Description: EXEMSI MSI Wrapper Versions prior to 10.0.50 and at least since version 6.0.91 will introduce a local privilege escalation vulnerability in installers it creates.
CVSS Score: 7.8 (HIGH)
References: http://exemsi.com; http://msi.com; https://improsec.com/tech-blog/privilege-escalation-vulnerability-in-ninjarmm
CVE: CVE-2022-29580
Published: 2022-12-13
Description: There exists a path traversal vulnerability in the Android Google Search app. This is caused by the incorrect usage of uri.getLastPathSegment. A symbolic encoded string can bypass the path logic to get access to unintended directories. An attacker can manipulate paths that could lead to code execution on the device. We recommend upgrading beyond version 13.41
CVSS Score: 8.9 (HIGH)
CWE: CWE-427, CWE-22
References: https://support.google.com/faqs/answer/7496913?hl=en; https://support.google.com/faqs/answer/7496913?hl=en
CVE: CVE-2022-44303
Published: 2022-12-13
Description: Resque Scheduler version 1.27.4 is vulnerable to Cross-site scripting (XSS). A remote attacker could inject javascript code to the "{schedule_job}" or "args" parameter in /resque/delayed/jobs/{schedule_job}?args={args_id} to execute javascript at client side.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://resque.com; https://trungvm.gitbook.io/cves/resque/resque-1.27.4-multiple-reflected-xss-in-resque-schedule-job; http://resque.com
CVE: CVE-2022-44636
Published: 2022-12-13
Description: The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-290
References: https://samsung.com; https://samsungtvbounty.com/securityUpdates; https://samsung.com
CVE: CVE-2022-45685
Published: 2022-12-13
Description: A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/jettison-json/jettison/issues/54; https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html; https://www.debian.org/security/2023/dsa-5312
CVE: CVE-2022-45688
Published: 2022-12-13
Description: A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/dromara/hutool/issues/2748; https://github.com/stleary/JSON-java/issues/708; https://github.com/dromara/hutool/issues/2748
CVE: CVE-2022-45689
Published: 2022-12-13
Description: hutool-json v5.8.10 was discovered to contain an out of memory error.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/dromara/hutool/issues/2747; https://github.com/dromara/hutool/issues/2747
CVE: CVE-2022-45690
Published: 2022-12-13
Description: A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/dromara/hutool/issues/2746; https://github.com/stleary/JSON-java/issues/654; https://github.com/dromara/hutool/issues/2746
CVE: CVE-2022-45693
Published: 2022-12-13
Description: Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/jettison-json/jettison/issues/52; https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html; https://www.debian.org/security/2023/dsa-5312
CVE: CVE-2022-45871
Published: 2022-12-13
Description: A Denial-of-Service (DoS) vulnerability was discovered in the fsicapd component used in WithSecure products whereby the service may crash while parsing ICAP request. The exploit can be triggered remotely by an attacker.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://www.withsecure.com/en/support/security-advisories; https://www.withsecure.com/en/support/security-advisories
CVE: CVE-2022-46059
Published: 2022-12-13
Description: AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-CSRF/add_user_csrf/add_user_csrf.md; https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-CSRF/add_user_csrf/add_user_csrf.md
CVE: CVE-2022-46363
Published: 2022-12-13
Description: A vulnerability in Apache CXF before versions 3.5.5 and 3.4.10 allows an attacker to perform a remote directory listing or code exfiltration. The vulnerability only applies when the CXFServlet is configured with both the static-resources-list and redirect-query-check attributes. These attributes are not supposed to be used together, and so the vulnerability can only arise if the CXF service is misconfigured.


CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c; https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c
CVE: CVE-2021-0934
Published: 2022-12-13
Description: In findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-169762606
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1284, CWE-1284
References: https://source.android.com/security/bulletin/2022-12-01; https://source.android.com/security/bulletin/2022-12-01
CVE: CVE-2021-39617
Published: 2022-12-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2021-39660
Published: 2022-12-13
Description: In TBD of TBD, there is a possible way to archive arbitrary code execution in kernel due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-254742984
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-362
References: https://source.android.com/security/bulletin/2022-12-01; https://source.android.com/security/bulletin/2022-12-01
CVE: CVE-2021-40365
Published: 2022-12-13
Description: Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf
CVE: CVE-2021-44693
Published: 2022-12-13
Description: Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-1284, CWE-1284
References: https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf
CVE: CVE-2021-44694
Published: 2022-12-13
Description: Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1287, CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf
CVE: CVE-2021-44695
Published: 2022-12-13
Description: Affected devices don't process correctly certain special crafted packets sent to port 102/tcp, which could allow an attacker to cause a denial of service in the device.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-1286, CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-382653.pdf
CVE: CVE-2022-20240
Published: 2022-12-13
Description: In sOpAllowSystemRestrictionBypass of AppOpsManager.java, there is a possible leak of location information due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-231496105
CVSS Score: 2.3 (LOW)
CWE: CWE-862, CWE-862
References: https://source.android.com/security/bulletin/2022-12-01; https://source.android.com/security/bulletin/2022-12-01
CVE: CVE-2022-20411
Published: 2022-12-13
Description: In avdt_msg_asmbl of avdt_msg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-232023771
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/2022-12-01; https://source.android.com/security/bulletin/2022-12-01
CVE: CVE-2022-20442
Published: 2022-12-13
Description: In onCreate of ReviewPermissionsActivity.java, there is a possible way to grant permissions for a separate app with API level < 23 due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-176094367
CVSS Score: 7.3 (HIGH)
CWE: CWE-1021, CWE-1021
References: https://source.android.com/security/bulletin/2022-12-01; https://source.android.com/security/bulletin/2022-12-01
CVE: CVE-2022-20444
Published: 2022-12-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2022-20449
Published: 2022-12-13
Description: In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a path traversal error. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-239701237
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://source.android.com/security/bulletin/2022-12-01; https://source.android.com/security/bulletin/2022-12-01
CVE: CVE-2022-20466
Published: 2022-12-13
Description: In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java, there is a possible way to observe the user's password on a secondary display due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-179725730
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-1188, CWE-1188
References: https://source.android.com/security/bulletin/2022-12-01; https://source.android.com/security/bulletin/2022-12-01
CVE: CVE-2022-20468
Published: 2022-12-13
Description: In BNEP_ConnectResp of bnep_api.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-228450451
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://source.android.com/security/bulletin/2022-12-01; https://source.android.com/security/bulletin/2022-12-01
CVE: CVE-2022-20469
Published: 2022-12-13
Description: In avct_lcb_msg_asmbl of avct_lcb_act.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-230867224
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/2022-12-01; https://source.android.com/security/bulletin/2022-12-01
CVE: CVE-2022-20470
Published: 2022-12-13
Description: In bindRemoteViewsService of AppWidgetServiceImpl.java, there is a possible way to bypass background activity launch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-234013191
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://source.android.com/security/bulletin/2022-12-01; https://source.android.com/security/bulletin/2022-12-01