Wiqaytna-app / wiqaytna_android

GNU General Public License v3.0
161 stars 65 forks source link

UNSAFE FILES DELETION #16

Open 4chrf opened 4 years ago

4chrf commented 4 years ago

File Name : 1.covid.trace.morocco.b.b$i, 2.covid.trace.morocco.services.FCMService$e

Issue Details : This app uses file.delete() in the following methods: 1.covid.trace.morocco.b.b$i.a() 2.covid.trace.morocco.services.FCMService$e.a

Threat /: When you delete a file using file.delete(), only the reference to the file is removed from the file system table. The file still exists on disk until other data overwrites it, leaving it vulnerable to recovery

Risk/: Because of what just explained everything you delete may be recovered by any user or attacker, especially on rooted devices