CVE-2023-21312

Summary

CVE-2023-21312 is a newly identified vulnerability that affects the IntentResolver component. This issue involves a confused deputy condition, leading to a potential cross-user media read. This means that sensitive information could be disclosed to unauthorized users without the need for additional execution privileges. Notably, user interaction is not required for an attacker to exploit this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.