CVE-2023-35680

Summary

CVE-2023-35680 is a vulnerability involving a confused deputy issue in multiple locations. This means that contacts belonging to other users can be imported without the need for additional execution privileges, resulting in local information disclosure. Unlike some vulnerabilities, user interaction is not required for exploitation to occur.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.