CVE-2023-28203: Infoleak
Published May 23, 2023
·Updated
Apple Music on Android. The issue was addressed with improved checks.
Other sources
The issue was addressed with improved checks. This issue is fixed in Apple Music 4.2.0 for Android. An app may be able to access contacts.
Credit
ZiMing Zeng@@hluwa(iJiami Technology Co)
Affected Software
2 affected componentsFixes available
Apple Music Android<4.2.0
Apple Apple Music for Android<4.2.0
4.2.0
Event History
Jul 28, 2023
CVE Published
via MITRE·04:30 AM
Data Sourced
via MITRE·04:30 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-28203?
CVE-2023-28203 is classified as a medium severity vulnerability.
2
How do I fix CVE-2023-28203?
To resolve CVE-2023-28203, update Apple Music to version 4.2.0 for Android.
3
What type of issue is CVE-2023-28203?
CVE-2023-28203 allows an app to potentially access contacts without proper authorization.
4
Which versions of Apple Music are affected by CVE-2023-28203?
CVE-2023-28203 affects all versions of Apple Music for Android prior to 4.2.0.
5
What platforms does CVE-2023-28203 affect?
CVE-2023-28203 specifically affects the Apple Music app on Android devices.