critical9.8
CVE-2023-49000
An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via interaction with the com.artis.browser.I…
Impact
An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via interaction with the com.artis.browser.IntentReceiverActivity component. NOTE: this is disputed by the vendor, who indicates that ArtisBrowser 34 does not support CSS3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Artistscope | Artisbrowser | through 34.1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/actuator/com.artis.browser/blob/main/CWE-94.md
- https://github.com/actuator/cve/blob/main/CVE-2023-49000
- https://github.com/advisories/GHSA-866h-q63m-66xm
- https://github.com/actuator/com.artis.browser/blob/main/CWE-94.md
- https://github.com/actuator/cve/blob/main/CVE-2023-49000