Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f287-vf22-3v2c

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature available in the "attach file" menu, then Signal will leave the picture in its own cache directory, which is available to any application on the system.

Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature available in the "attach file" menu, then Signal will leave the picture in its own cache directory, which is available to any application on the system.

EPSS

Процентиль: 31%
0.00119
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.7
nvd
около 7 лет назад

Signal Messenger for Android 4.24.8 may expose private information when using "disappearing messages." If a user uses the photo feature available in the "attach file" menu, then Signal will leave the picture in its own cache directory, which is available to any application on the system.

EPSS

Процентиль: 31%
0.00119
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-200