Unvalidated implicit intent result leaks private files to a world-readable cache
Unvalidated implicit intent data lets a malicious app return an internal file:// URI, which AnkiDroid copies into a world-readable cache directory.
// tagged · 5 posts
#arbitrary-file-read
File theft via missing intent validation and over-broad FileProvider paths
Theft of arbitrary files via lack of intent validation and insecure provider paths in TTFViewerActivity.kt.
Attacker-controlled bash scripts execute through the exported BashAssociation activity
Theft of arbitrary files via execution of attacker-controlled bash scripts through the exported BashAssociation activity.
Intent validation gap in TextViewerActivity opens arbitrary private files
Improper validation of intent data in TextViewerActivity allows a malicious app to open arbitrary files from Inure's private storage.
setResult misuse in a third-party welcome screen leaks a non-exported FileProvider
Theft of arbitrary files from a non-exported FileProvider via improper setResult() in a third-party welcome screen library.