CVE Catalog
CVE-2023-33909
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.08%
0th percentile - higher than 0% of all known CVEs
Summary
In the Contacts service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
Risk Assessment
The lack of proper permission checks may allow unauthorized access to sensitive data, posing a threat to user privacy.
Recommendation
It is recommended to implement proper permission checks in the Contacts service to secure access to information.
Original NVD description (English source)
In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges