Path Traversal in React Native Receive Sharing Intent

Executive Summary

The vulnerability exists in react-native-receive-sharing-intent and is a path traversal issue. It allows a malicious application running on the same device to write files outside the intended cache directory by providing a specially crafted _display_name value containing dot-dot path components. This is done through a malicious ContentProvider.

An attacker can send an explicit ACTION_SEND intent to the target app's exported share-receiver activity, which then allows the attacker to overwrite arbitrary files in the target app's private data directory. This includes critical files such as databases, shared preferences, and cached configuration files, replacing them with attacker-controlled content.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have serious impacts because it allows an attacker to overwrite important files within the affected application's private data directory. This can lead to data corruption, loss of user data, or manipulation of application behavior.

• Attackers can overwrite databases, potentially corrupting or altering stored data.
• Shared preferences can be overwritten, which may affect app settings or user preferences.
• Cached configuration files can be replaced, possibly changing how the app operates.

Overall, this can lead to integrity and availability issues within the app, potentially causing denial of service or unauthorized modification of app data.

Useful 0 Not Useful 0