DerScanner
Home / Vulnerability Database / Android : Read from external storage
Android

Android : Read from external storage

Classification

OWASP Mobile Top 10 2016
M2-Insecure Data StorageM3-Insecure Communication
OWASP Top 10 2017
A1-InjectionA3-Sensitive Data Exposure
OWASP Top 10 2021
A3-InjectionA2-Cryptographic FailuresA4-Insecure Design
CWE
CWE-20CWE-22CWE-77CWE-78CWE-89CWE-94CWE-99CWE-200CWE-312CWE-313CWE-319CWE-611CWE-921
CWE/SANS Top 25 2011
CWE-22CWE-78CWE-89
CWE/SANS Top 25 2021
CWE-20CWE-22CWE-77CWE-78CWE-89CWE-200CWE-611

Overview

The application reads data from external storage - this is unsafe. Files created on external storage are world readable and writeable, i.e. any app can read or write to them.

References

  1. CWE CATEGORY: OWASP Top Ten 2017 Category A1 - Injection
  2. CWE-99: Improper Control of Resource Identifiers (‘Resource Injection’)
MEDIUM

DerScanner Severity Score

Do you want to fix Android : Read from external storage in your application?

See also

Android

Android : Debug mode on

Android

Android : Error handling: generic exception

Android

Android : HTTP usage