myplanet icon indicating copy to clipboard operation
myplanet copied to clipboard

Published 20 hours ago • verified publisher icon open-learning-exchange

Insecure Data Storage

Open dogi opened this issue 2 years ago • 0 comments

The file or SharedPreference is World Writable. Any App can write to the file

https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2

CWE: CWE-276: Incorrect Default Permissions
OWASP Top 10: M2: Insecure Data Storage
OWASP MASVS: MSTG-STORAGE-2

org/ole/planet/myplanet/ui/news/NewsFragment.java

dogi avatar Sep 14 '23 16:09 dogi