WEB.DE Online-Speicher - Certificates or keys found, External URLs, Native code usage vulnerabilities

Name

Vendor

Link

Store

Version

• NOTICE
Suspicious files

Are you sure these files should be here?

Native code usage

Native code (.so) usage 'System.loadLibrary();' is found.

External URLs

Were do they point?

Unsafe deleting

All items deleted with 'file.delete()' could be recovered.

• MEDIUM
Certificates or keys found

These credentials could be used for authentication.

WebView JavaScript enabled

WebView 'setJavaScriptEnabled(true)' could be exploited during cross-site scripting attacks.

WebView files access

Control of WebView context allows to access local files.

SD-card access

SD-cards and other external storages have 'worldwide read' policy.

• CRITICAL
WebView code execution

WebView 'addJavascriptInterface' could be used to control the host app with JavaScript bindings. Remote Code Execution (RCE) is possible.

References