React Native Receive Sharing Intent
Approved changes feed: RSS · Atom
cpe:2.3:a:ajith-ab:react-native-receive-sharing-intent:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ajith Ab (6a18db90-5584-57c2-9dd0-26a47a801c74) |
|---|---|
| Product | React Native Receive Sharing Intent (e1e24d71-e9db-5523-aa64-1b6dc5162b94) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-58460 |
vulnerable | 2026-07-29 01:03:16.831100 |
react-native-receive-sharing-intent Path Traversal via _display_name
HIGH (7.7)
react-native-receive-sharing-intent contains a path traversal vulnerability that allows a co-resident malicious application to write files outside the intended cache directory by supplying a crafted _display_name value containing dot-dot path components through a malicious ContentProvider. Attackers can fire an explicit ACTION_SEND intent at the consuming app's exported share-receiver activity to overwrite arbitrary files in the consuming app's private data directory, including databases, shared preferences, and cached configuration, with attacker-controlled content.
Published: 2026-07-02T20:10:40.633Z
Updated: 2026-07-14T22:03:07.670Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.