41 matches found
Theft of Arbitrary Files due to execution of attacker scripts from BashAssociation.kt
Description Tested on Build87 of the Inure application. It was discovered that the application had an exported activity app.simple.inure.activities.association.BashAssociation which accepted intent data via the file scheme + text/x-shellscript mime type and executed the commands contained within...
1.9CVSS7.1AI score0.00396EPSS
SaveExploits1References1
20