Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Cordova plugin cordova-plugin-x-socialsharing (SocialSharing-PhoneGap-Plugin) for Android 6.0.4, registers an exported broadcast receiver nl.xservices.plugins.ShareChooserPendingIntent with an android.intent.action.SEND intent filter. The onReceive implementation accesses Intent.EXTRA_CHOSEN_COMPONENT without checking for null. If a broadcast is sent with extras present but without EXTRA_CHOSEN_COMPONENT, the code dereferences a null value and throws a NullPointerException. Because the receiver is exported and performs no permission or caller validation, any local application on the device can send crafted ACTION_SEND broadcasts to this component and repeatedly crash the host application, resulting in a local, unauthenticated application-level denial of service for any app that includes the plugin.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PhoneGap / Cordova Social Sharing plugin 安全漏洞
Vulnerability Description
PhoneGap / Cordova Social Sharing plugin是Eddy Verbruggen个人开发者的一个文本文件共享插件。 PhoneGap / Cordova Social Sharing plugin 6.0.4版本存在安全漏洞，该漏洞源于导出的广播接收器未检查Intent.EXTRA_CHOSEN_COMPONENT是否为null，可能导致本地应用程序级拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A