CVE-2023-28284: 
NixOS vulnerability analysis and mitigation

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability, identified as CVE-2023-28284, affects Microsoft Edge versions prior to 112.0.2722.34 on Android platforms. The vulnerability was disclosed and addressed in April 2023 (NVD, CERT-FR).

The vulnerability is classified as a Security Feature Bypass issue with a CVSS v3.1 Base Score of 4.3 (Medium), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. This indicates that the vulnerability can be exploited over the network, requires low attack complexity, needs no privileges, but does require user interaction (NVD).

The vulnerability could allow an attacker to bypass security features in Microsoft Edge, potentially leading to unauthorized actions. The specific impact is rated as having low integrity impact with no confidentiality or availability impacts affected (NVD).

The vulnerability requires network access and user interaction for successful exploitation. The attack complexity is considered low, indicating that the attack can be performed with relative ease once the necessary conditions are met (NVD).

Microsoft has released a security update to address this vulnerability. Users should upgrade to Microsoft Edge version 112.0.1722.34 or later to mitigate the risk (CERT-FR).