Improper URL Validation in Samsung Members Software
CVE-2023-30703

3.3LOW

Key Information:

Vendor
Samsung
Status
Samsung Members
Vendor
CVE Published:
10 August 2023

Summary

An improper URL validation vulnerability exists in Samsung Members, allowing unauthorized access to sensitive information for users prior to version 14.0.07.1. This security flaw highlights the importance of robust validation mechanisms to protect user data from malicious exploitation.

Affected Version(s)

Samsung Members 14.0.07.1

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.