File Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:ekia:file_manager:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Ekia (8bfc8ce4-c200-5fcd-9043-933d88498663) |
|---|---|
| Product | File Manager (3477bcd5-bb9a-5b62-a40e-5aadd9af65d5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-81301 |
vulnerable | 2026-09-16 04:32:48.468663 |
Ekia File Manager 1.2.7 - Exported ContentProvider allows unauthorized file access
Ekia File Manager 1.2.7 exposes com.ekia.filecontrolmanager.OpenFileProvider as an exported Android ContentProvider without requiring caller permissions.
The provider maps the caller-controlled URI path directly to a filesystem path and passes it to new File(...). It then supports query(), openFile(), and delete() operations. Because the provider is exported and lacks android:permission, android:readPermission, or android:writePermission, another local application can access the provider authority and cause File Manager's process to read, create, overwrite, or delete files that are accessible to that process.
Published: 2026-09-14T15:51:38.531Z
Updated: 2026-09-14T19:23:00.039Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.