Path Traversal in Flutter/Dart receive_sharing_intent Package

Executive Summary

This vulnerability is a path traversal issue in the Flutter/Dart receive_sharing_intent package for Android. It allows a malicious app on the same device to write files outside the intended cache directory by crafting a display name with path traversal sequences like ../databases/proof.txt. The attacker can then overwrite files within the receiving app's private sandbox under its user ID without user interaction.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your app uses the receive_sharing_intent package versions 1.4.1 through 1.9.0. Inspect the package version in your project dependencies. If vulnerable, look for file writes outside the intended cache directory, especially with crafted filenames containing path traversal sequences like ../.

Useful 0 Not Useful 0

Impact Analysis

If you use an affected version of the receive_sharing_intent package, a malicious app on your device could overwrite sensitive files in the app's private storage. This could lead to data corruption, unauthorized modifications, or potential privilege escalation within the app.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could impact compliance by allowing unauthorized file modifications, potentially violating data integrity requirements in GDPR and HIPAA. It may lead to unauthorized access or tampering with sensitive data, which could result in regulatory penalties or breaches of compliance standards.

Useful 0 Not Useful 0

Mitigation Strategies

Update the receive_sharing_intent package to a version outside the vulnerable range (1.4.1 to 1.9.0). If using Flutter/Dart, verify the package version in your project dependencies and apply the latest patch.

Useful 0 Not Useful 0