176
submitted 7 months ago by toaster@slrpnk.net to c/opensource@lemmy.ml
you are viewing a single comment's thread
view the rest of the comments
[-] ThetaDev@lemmy.dbzer0.com 2 points 7 months ago

Plus how would you want to exploit a F-Droid SQL injection vulnerability in the search bar?

AFAIK you cannot trigger searches using URLs, so the user would have to type/paste the SQL into the search field themselves to mess up their database.

[-] nutomic@lemmy.ml 3 points 7 months ago

One of the comments mentions that another app can trigger search through an Android intent. So its better to be safe and close any potential vulnerabilities, but this doesnt seem particularly useful for an attacker.

this post was submitted on 04 Apr 2024
176 points (100.0% liked)

Open Source

31186 readers
123 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago
MODERATORS