What is CVE-2023-21515?

CVE-2023-21515 is a high-severity vulnerability in Samsung Galaxy_store, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2023-05-26.

How severe is CVE-2023-21515?

High severity. CVSS v3 base score is 7.5 out of 10.

Improper input validation in Samsung Galaxy_store

CVE-2023-21515

InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.005 (40.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Samsung Galaxy_store
Samsung Mobile Galaxy Store — versions unspecified

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

mobile.security@samsung.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-21515?: CVE-2023-21515 is a high-severity vulnerability in Samsung Galaxy_store, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2023-05-26.
How severe is CVE-2023-21515?: High severity. CVSS v3 base score is 7.5 out of 10.