CVE-2024-2364
4.6
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 0.9 / Impact: 3.6
Source: NVD
Description
A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-256320.
Affected (1)
Products: Kirillmakarov: Musicshelf
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.1 |
Related CWEs
CWE-530
Exposure of Backup File to an Unauthorized Control Sphere
A backup file is stored in a directory or archive that is made accessible to unauthorized actors.
CWE-552
Files or Directories Accessible to External Parties
The product makes files or directories accessible to unauthorized actors, even though they should not be.
References (6)
Source: cna@vuldb.com
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Timeline
No history available yet.