CVE-2024-54462

The file names constructed within imagepicker are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select an image file from that provider while using your app and could...

image_picker_android 安全漏洞

imagepickerandroid is a Flutter package open-sourced by Flutter. A security vulnerability exists in imagepickerandroid versions 0.8.5+6 through 0.8.12+17, which stems from a lack of cleanup checks on filenames, and makes it vulnerable to malicious document providers...

CVE-2024-54462: Relative Path Traversal

The file names constructed within imagepicker are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select an image file from that provider while using your app and could...