CVE-2023-25632

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The Android Mobile Whale browser app before 3.0.1.2 allows the attacker to bypass its browser unlock function via 'Open in Whale' feature.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-359

Affected software

No affected versions have been published.

Timeline

Published
Nov 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-256410.0OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0.CVE-2023-256426.5There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an autCVE-2023-256438.8There is a command injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of multiple network paCVE-2023-256447.5There is a denial of service vulnerability in some ZTE mobile internet products. Due to insufficient validation of Web interface parameter, CVE-2023-256457.7There is a permission and access control vulnerability in some ZTE AndroidTV STBs. Due to improper permission settings, non-privileged appliCVE-2023-256466.4There is an unauthorized access vulnerability in ZTE H388X. If H388X is caused by brute-force serial port cracking,attackers with common useCVE-2023-256473.3There is a permission and access control vulnerability in some ZTE mobile phones. Due to improper access control, applications in mobile phoCVE-2023-256487.8There is a weak folder permission vulnerability in ZTE's ZXCLOUD iRAI product. Due to weak folder permission, an attacker with ordinary userCVE-2023-256498.8There is a command injection vulnerability in a mobile internet product of ZTE. Due to insufficient validation of SET_DEVICE_LED interface pCVE-2023-25656.1A vulnerability has been found in SourceCodester Multi Language Hotel Management Software 1.0 and classified as problematic. This vulnerabilCVE-2023-256506.5There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an aCVE-2023-256518.0There is a SQL injection vulnerability in some ZTE mobile internet products. Due to insufficient input validation of SMS interface parameter
CVE-2023-25632: Medium severity, CVSS 5.5 | Vulnix