Unscored CVE-2023-49000 EUVD-2023-53025GHSA-866h-q63m-66xm

An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via interaction with the…

Published Dec 27, 2023 · Updated Sep 20, 2024 · Assigned by mitre

Description

An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via interaction with the com.artis.browser.IntentReceiverActivity component. NOTE: this is disputed by the vendor, who indicates that ArtisBrowser 34 does not support CSS3.

References

https://github.com/actuator/com.artis.browser/blob/main/CWE-94.md
https://github.com/actuator/cve/blob/main/CVE-2023-49000
https://github.com/advisories/GHSA-866h-q63m-66xm