AOSP-DownloadProviderDbDumper

AOSP-DownloadProviderDbDumper Android 다운로드 제공자Download Provider의 SQL 인젝션을 악용하는 PoC CVE-2018-9493 보안 권고 https://ioactive.com/wp-content/uploads/2019/04/IOActive-Security-Advisory-Androids-Download-Provider-SQL-Injection-CVE-2018-9493.pdf 추가 정보...

CVE-2018-9493

CVE-2018-9493 affects Android’s Download Manager content provider, with an SQL injection due to improper input validation. This could lead to local information disclosure without extra privileges or user interaction. Affected Android versions include 7.0–9.0. The provided sources describe the iss...