Description
Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Galaxy Store | — | 4.5.64.4 |
High · 7.5
CVE-2023-42581
EUVD-2023-47014GHSA-95m4-cmvc-pjh9
Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to a…
Published Dec 5, 2023 · Updated Aug 28, 2024 · Assigned by SamsungMobile