DerScanner
Home / Vulnerability Database / Android : External storage manipulation
Android

Android : External storage manipulation

Classification

OWASP Mobile Top 10 2016
M8-Code Tampering
OWASP Top 10 2017
A5-Broken Access ControlA3-Sensitive Data Exposure
OWASP Top 10 2021
A1-Broken Access ControlA2-Cryptographic FailuresA4-Insecure Design
OWASP ASVS
Files and Resources
CWE
CWE-22CWE-73CWE-200CWE-434CWE-522CWE-642
CWE/SANS Top 25 2011
CWE-22CWE-434
CWE/SANS Top 25 2021
CWE-22CWE-200CWE-434CWE-522

Overview

The application modifies data from external storage. If the function arguments are obtained from an untrusted source, an attacker can modify the external storage file system.

References

  1. OWASP Top 10 2017-A5-Broken Access Control
  2. CWE-73: External Control of File Name or Path
LOW

DerScanner Severity Score

Do you want to fix Android : External storage manipulation in your application?

See also

Android

Android : Debug mode on

Android

Android : Error handling: generic exception

Android

Android : HTTP usage