Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command.
Info
Summary
Root Browser Classic 3.3.0 passes the path of a selected SQLite database to an operating-system shell without safely separating the filename from the command.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://fluidattacks.com/advisories/infant
- https://play.google.com/store/apps/details?id=com.jrummyapps.rootbrowser.classic
- https://fluidattacks.com/advisories/infant
Timeline
- nvd_ingest NVD