In multiple functions of MiniThumbFile.java, there is a possible way to view the thumbnails of deleted photos due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS
No CVSS.
References
Configurations
No configuration.
History
17 Jan 2025, 23:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-01-17 23:15
Updated : 2025-01-17 23:15
NVD link : CVE-2018-9379
Mitre link : CVE-2018-9379
CVE.ORG link : CVE-2018-9379
JSON object : View
Products Affected
No product.
CWE
No CWE.