CVE-2023-27652 - An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges cause a denial of service via the update_info field of the _default_.xml file

Back Back to CVE browser

MEDIUM

An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges cause a denial of service via the update_info field of the _default_.xml file

Published Apr 20, 2023

5.5

MEDIUM

CVSS 3.1

EPSS 0.35%

Description

An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges cause a denial of service via the update_info field of the _default_.xml file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-400

Uncontrolled Resource Consumption

CWE-611

XXE

References (4)

http://www.egostudiogroup.com/
Product
https://apkpure.com/cn/super-clean-phone-cleaner/com.egostudio.clean/download
Product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31388
Advisory
https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27652/CVE%20detail.md
ExploitThird Party Advisory

Link	Providers	Tags
http://www.egostudiogroup.com/		Product
https://apkpure.com/cn/super-clean-phone-cleaner/com.egostudio.clean/download		Product
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-31388		Advisory
https://github.com/LianKee/SODA/blob/main/CVEs/CVE-2023-27652/CVE%20detail.md		ExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 20, 2023

Updated Feb 5, 2025

Reserved Mar 5, 2023

Link CVE-2023-27652

CISA Vulnrichment

Updated Feb 5, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-27652

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 20, 2023

Updated Feb 5, 2025

Link EUVD-2023-31388

GitHub

No data