6 matches found
EUVD-2024-52572
Malicious code in bioql PyPI...
EUVD-2024-52573
Malicious code in bioql PyPI...
CVE-2024-54461
The file names constructed within fileselector are missing sanitization checks leaving them vulnerable to malicious document providers. This may result in cases where a user with a malicious document provider installed can select a document file from that provider while using your app and could...
CVE-2024-54462
CVE-2024-54462 concerns the Flutter image_picker_android component. The issue arises from unsanitized filenames created by image_picker, which can be exploited by a malicious document provider to have a user select an image file from that provider and potentially override internal files in the ap...
CVE-2024-54461
CVE-2024-54461 affects file_selector_android (Flutter). The issue is unsanitized/cleanup-lacking filenames in file_selector’s file choosing, allowing a malicious document provider to select a file and potentially overwrite internal files in the app cache. A fix exists in 0.5.1+12; update to the l...
PT-2025-3025 · Unknown · File Selector +1
Name of the Vulnerable Software and Affected Versions: file selector versions prior to 0.5.1+12 file selector android versions prior to 0.5.1+12 Description: The file names constructed within file selector are missing sanitization checks, leaving them vulnerable to malicious document providers...