CVE-2023-33293
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
An issue was discovered in KaiOS 3.0 and 3.1 where the binary /system/kaios/api-daemon exposes a local web server on *.localhost with subdomains for each installed application. An attacker can make fetch requests to api-daemon to determine if a given app is installed and read the manifest.webmanifest contents, including the app version.
Risk Assessment
The risk to the organization involves the potential disclosure of information about installed applications and their versions, which could lead to further attacks or exploitation of known vulnerabilities in the applications.
Recommendation
It is recommended to restrict access to the local web server and implement authorization mechanisms to prevent unauthorized access to application manifests.
Original NVD description (English source)
An issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local web server on *.localhost with subdomains for each installed applications, e.g., myapp.localhost. An attacker can make fetch requests to api-deamon to determine if a given app is installed and read the manifest.webmanifest contents, including the app version.