CVE-2023-34165
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
CVE-2023-34165 describes an unauthorized access vulnerability in the 'Save for later' feature provided by AI Touch. Successful exploitation may allow third-party apps to forge a URI for unauthorized access with zero permissions.
Risk Assessment
The organization may be exposed to unauthorized access to data or functions, potentially leading to security breaches and loss of confidentiality.
Recommendation
It is recommended to update the AI Touch software and implement additional authorization mechanisms to minimize the risk of unauthorized access.
Original NVD description (English source)
Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause third-party apps to forge a URI for unauthorized access with zero permissions.