Forkyz: Improper authorization allows changing another user's storage settings
An issue in Forkyz, an unofficial Android crossword app, versionCode 8500000 (Version 85), allows an attacker to change another user's storage settings by supplying a crafted URI string. The conditions for exploitation are not fully confirmed, and the vulnerability is unclear about whose storage is affected. The NVD score of 7.5 is not verified and conflicts with a VulDB score of 3.5 (Low).
Forkyz · Forkyz
