Skip to content
OpenAdvisories
Medium · 6.2 CVE-2023-21434 EUVD-2023-25602GHSA-m5xh-w97f-qrvv

Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute JavaScript by launching…

Published Feb 9, 2023 · Updated Mar 20, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Galaxy Store

Description

Improper input validation vulnerability in Galaxy Store prior to version 4.5.49.8 allows local attackers to execute JavaScript by launching a web page.

Affected products

VendorProductAffectedFixed
Samsung Mobile Galaxy Store unspecified – < 4.5.49.8 4.5.49.8

References