PT-2023-27286 · Unknown · Fillui.Java

CVE-2023-40134

·

Publicado

2023-10-27

·

Atualizado

2025-02-04

CVSS v3.1

3.3

Baixa

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions No specific software name or version is mentioned in the provided descriptions.
Description The issue is related to a confused deputy in the isFullScreen function of FillUi.java, which could allow viewing another user's images. This leads to local information disclosure without requiring additional execution privileges. User interaction is not necessary for exploitation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

ASB-A-283101289
CVE-2023-40134

Produtos afetados

Fillui.Java