CVE-2023-21433

Name of the Vulnerable Software and Affected Versions Galaxy Store versions prior to 4.5.49.8

Description The issue is related to improper access control in the Galaxy Store application, which is associated with incorrect default permissions. This allows a local attacker to install applications from the Galaxy Store without user interaction.

Recommendations For Galaxy Store versions prior to 4.5.49.8, update to version 4.5.49.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the Galaxy Store application to minimize the risk of exploitation.