PT-2023-27291 · Fillui · Fillui

Tim Yu

·

CVE-2023-40139

·

Published

2023-10-27

·

Updated

2025-02-04

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions FillUi (affected versions not specified)
Description The issue in FillUi.java allows for local information disclosure due to a confused deputy, enabling the viewing of another user's images without requiring additional execution privileges or user interaction.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-610

Related Identifiers

ASB-A-281533566
CVE-2023-40139

Affected Products

Fillui