Share 2 Archive Today: Improper component export allows clipboard overwrite
Share 2 Archive Today for Android, versionCode 61, exports a headless activity without permission protection or caller checks. Any app installed on the same device can start it with a crafted URL and silently replace the content of the clipboard. The attacker cannot read the clipboard or run code, and the victim only needs the app installed, but the next paste may then carry attacker-controlled content.
Gnosco · Share 2 Archive Today
