A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-256320.
References
| Link | Resource |
|---|---|
| https://github.com/ctflearner/Android_Findings/blob/main/Musicshelf/Musicshelf_Manifest_issue.md | Exploit |
| https://github.com/ctflearner/Android_Findings/blob/main/Musicshelf/Musicshelf_Manifest_issue.md | Exploit |
| https://vuldb.com/?ctiid.256320 | Permissions Required |
| https://vuldb.com/?ctiid.256320 | Permissions Required |
| https://vuldb.com/?id.256320 | Permissions Required |
| https://vuldb.com/?id.256320 | Permissions Required |
Configurations
History
26 Feb 2025, 15:14
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:kirillmakarov:musicshelf:1.1:*:*:*:*:android:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.6 |
| References | () https://vuldb.com/?id.256320 - Permissions Required | |
| References | () https://github.com/ctflearner/Android_Findings/blob/main/Musicshelf/Musicshelf_Manifest_issue.md - Exploit | |
| References | () https://vuldb.com/?ctiid.256320 - Permissions Required | |
| CWE | CWE-552 | |
| First Time |
Kirillmakarov
Kirillmakarov musicshelf |
10 Mar 2024, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-10 23:15
Updated : 2025-02-26 15:14
NVD link : CVE-2024-2364
Mitre link : CVE-2024-2364
JSON object : View
Products Affected
kirillmakarov
- musicshelf
CWE
CWE-552
Files or Directories Accessible to External Parties