CVE-2023-30678

Potential zip path traversal vulnerability in Calendar application prior to version 12.4.07.15 in Android 13 allows attackers to write arbitrary file.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:samsung:calendar:*:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*

History

21 Nov 2024, 08:00

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.5
v2 : unknown
v3 : 5.1
References () https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07 - Vendor Advisory () https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07 - Vendor Advisory

13 Jul 2023, 01:09

Type Values Removed Values Added
First Time Google android
Samsung calendar
Samsung
Google
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
References (MISC) https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07 - (MISC) https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07 - Vendor Advisory
CPE cpe:2.3:a:samsung:calendar:*:*:*:*:*:*:*:*
cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*
CWE CWE-22

06 Jul 2023, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-07-06 03:15

Updated : 2024-11-21 08:00


NVD link : CVE-2023-30678

Mitre link : CVE-2023-30678

CVE.ORG link : CVE-2023-30678


JSON object : View

Products Affected

google

  • android

samsung

  • calendar
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')