Alan: Health Insurance for Android 1.450.0 Path Traversal via ShareReceiverActivity

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

Alan: Health Insurance for Android (com.alanmobile) 1.450.0 contains a path traversal vulnerability that allows a co-resident malicious application to write attacker-controlled files outside the intended directory via the exported ShareReceiverActivity, which uses an unsanitized _display_name value from a shared content URI to construct the destination file path. Attackers can send a crafted ACTION_SEND intent with a _display_name containing directory traversal sequences to overwrite sensitive files within the app's sandbox such as databases, shared_prefs, and WebView data, enabling state tampering or code execution in the app's context without authentication or user interaction.

Etkilenen sürümler1 yazılım

Kaynaklar5 kaynak

• CVE.org kaydı
• NVD kaydı
• vulncheck.com/…droid-path-traversal-via-sharereceiveractivity Üçüncü taraf
• github.com/actuator/com.alanmobile İstismar kodu ya da analiz
• play.google.com/store/apps/details Diğer

Kayıt geçmişi

1. 5 Kas 2026 00:31Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-57565Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)
• 8,6 CVE-2026-57567Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webview
• 6,5 CVE-2026-16725IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith
• 10,0 CVE-2026-122013Comfast CF-WR632AX Multipart webmgnt path traversal
• 6,3 CVE-2026-76806Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle
• 7,6 CVE-2026-76506Cisco Unified Computing System Central Remote Code Execution Vulnerability