An issue found in WHOv.1.0.28, v.1.0.30, v.1.0.32 allows an attacker to cause a escalation of privileges via the TTMultiProvider component.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Who | Whoapp | 1.0.28 (including) | 1.0.28 (including) |
| Who | Whoapp | 1.0.30 (including) | 1.0.30 (including) |
| Who | Whoapp | 1.0.32 (including) | 1.0.32 (including) |
References
- https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27654/CVE%20detail.md
- https://play.google.com/store/apps/details?id=com.scorp.who
- https://www.whoapp.live/
- https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27654/CVE%20detail.md
- https://play.google.com/store/apps/details?id=com.scorp.who
- https://www.whoapp.live/