CVE-2023-0238: Injecting Activity Loads in WARP Mobile Client
Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerability which allowed a malicious app installed on a victim's device to exploit a peculiarity in an Android function, wherein under certain conditions, the malicious app could dictate the task behaviour of the WARP app.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2023-0238.
What is the severity of CVE-2023-0238?
The severity of CVE-2023-0238 is medium with a score of 5.5.
Which software versions are affected by CVE-2023-0238?
The WARP Mobile Client versions up to and including 6.29 for Android are affected by CVE-2023-0238.
How can a malicious app exploit CVE-2023-0238?
A malicious app installed on a victim's device can exploit a peculiarity in an Android function to dictate the task.
Where can I find more information about CVE-2023-0238?
You can find more information about CVE-2023-0238 on the Cloudflare Warp developer documentation and GitHub advisory page.