Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Path Traversal in Android Google Search App
Vulnerability Description
There exists a path traversal vulnerability in the Android Google Search app. This is caused by the incorrect usage of uri.getLastPathSegment. A symbolic encoded string can bypass the path logic to get access to unintended directories. An attacker can manipulate paths that could lead to code execution on the device. We recommend upgrading beyond version 13.41
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
Vulnerability Type
对搜索路径元素未加控制
Vulnerability Title
Google Search 路径遍历漏洞
Vulnerability Description
Google Search是美国谷歌（Google）公司的一个互联网搜索引擎。 Google Search应用程序存在路径遍历漏洞，该漏洞源于其uri.getLastPathSegment的错误使用导致符号编码字符串可以绕过路径逻辑来访问非预期目录实现路径遍历。攻击者可以操纵可能导致在设备上执行代码的路径。
CVSS Information
N/A
Vulnerability Type
N/A