CVE-2023-21516: XSS
Published May 26, 2023
·Updated
XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store.
Affected Software
1 affected component
Samsung Galaxy Store<4.5.49.8
Event History
May 26, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-21516?
The severity of CVE-2023-21516 is critical with a score of 9.6.
2
How does the XSS vulnerability in Galaxy Store impact users?
The XSS vulnerability in Galaxy Store allows attackers to execute javascript API to install APK from the store.
3
Which version of Galaxy Store is affected by CVE-2023-21516?
Galaxy Store versions prior to 4.5.49.8 are affected by CVE-2023-21516.
4
What can attackers do with the XSS vulnerability in Galaxy Store?
Attackers can execute javascript API to install APK from the Galaxy Store using the XSS vulnerability.
5
How can I protect myself from the XSS vulnerability in Galaxy Store?
To protect yourself from the XSS vulnerability in Galaxy Store, make sure to update to version 4.5.49.8 or higher.