CVE Catalog
CVE-2023-33912
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.08%
0th percentile - higher than 0% of all known CVEs
Summary
In the Contacts service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.
Risk Assessment
The organization may be exposed to the disclosure of sensitive information, potentially leading to privacy violations.
Recommendation
It is recommended to conduct a permissions audit in the Contacts service and implement appropriate access controls.
Original NVD description (English source)
In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges