CVE-2023-42572

Low

Description

Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information.

SeverityLow
CVSS3.3
Exploit probability—
ProductSamsung Account Web Software Development Kit
PublishedDec 5, 2023
First seenDec 5, 2023
Weakness typeCWE-927CWE-927

How to fix

Update
  • samsung account_web_software_development_kit1.5.24 or later

Affected products

ProductAffected versionsFixed in
samsung account_web_software_development_kitv < 1.5.241.5.24

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.