Vulnerability · Published May 24, 2023 · Assigned by VulDB

CVE-2023-2863Simple Design Daily Journal SQLite Database cleartext storage in a file or on disk

Low 2.3

In plain English

A low-severity security flaw in Daily Journal from Simple Design. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).

Severity (CVSS 3.1)2.3Low

Exploit odds (30 days)0.2%top 85.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown functionality of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-229819.

Affected products (as reported)

Vendor	Product	Versions
Simple Design	Daily Journal	1.012.GP.B

Weakness: CWE-313 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

References

https://vuldb.com/?id.229819 vdb-entry, technical-description
https://vuldb.com/?ctiid.229819 signature, permissions-required
https://www.youtube.com/watch?v=V0u9C5RVSic exploit, media-coverage