An issue was found in Action Launcher v50.5 allows an attacker to escalate privilege via modification of the intent string to function update.
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
Link | Tags |
---|---|
https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2022-47029/CVE%20detailed.md | third party advisory exploit |