Descrição
A security flaw has been discovered in achorein expo-share-intent up to 8.0.0. This affects the function getDataColumn of the file ExpoShareIntentModule.kt of the component Android File Copy Routine. The manipulation of the argument _display_name results in path traversal. The attack requires a local approach. Upgrading to version 8.0.1 is able to mitigate this issue. The patch is identified as c6900b1ed06fcc3ca4b09651348974ac5b95e4e6. The affected component should be upgraded.
CVSS 4.4EPSS 0.13699999999999998%Risco 0.45
Ver fonte- Publicação
- 2026-08-24 05:16:55
- Versões afetadas
- <=8.0.0
- Tipo
- Biblioteca
- Última alteração
- 2026-08-26 19:17:09
- Vetor
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L