CVE-2022-36839

SQL injection vulnerability via IAPService in Samsung Checkout prior to version 5.0.53.1 allows attackers to access IAP information.

Score

CVSS 3.1 5.9 Medium

Status

Modified - mobile.security@samsung.com

Published

2022-08-05

Last modified

2024-08-03

Weaknesses

CWE-89

Affected products

• Checkout (Samsung)
• Samsung Checkout (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=08