Skip to content
OpenAdvisories
Medium · 4.4 CVE-2023-30736 EUVD-2023-35100GHSA-5mxx-gfp7-297x

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. T…

Published Oct 4, 2023 · Updated Sep 19, 2024 · Assigned by Samsung Mobile

Description

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Assistant — 8.7.00.1

References