Improper Input Validation Vulnerability in SmartTagPlugin by Samsung
CVE-2022-36859

5.7MEDIUM

Key Information:

Vendor

Samsung
Status
Smarttagplugin
Vendor
CVE Published:
9 September 2022

What is CVE-2022-36859?

An improper input validation vulnerability exists in SmartTagPlugin prior to version 1.2.21-6. This flaw can be exploited by privileged attackers to execute cross-site scripting (XSS) attacks, potentially compromising user devices. It is essential for users to update their plugins to the latest version to mitigate the risk of exploitation and ensure the security of their devices.

Affected Version(s)

SmartTagPlugin < 1.2.21-6

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...
x_refsource_MISC

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.