high7.5
CVE-2023-42581
Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data.
Impact
Improper URL validation from InstantPlay deeplink in Galaxy Store prior to version 4.5.64.4 allows attackers to execute JavaScript API to access data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Galaxy Store | before 4.5.64.4 |