CNNVD-202508-1994 Information

Aug 18, 2025 cve

CNNVD ID

CNNVD-202508-1994

CVE-2025-9098

CNNVD Published: 2025-08-18

Description (Chinese)

Elseplus File Recovery App是elseplus lib个人开发者的一款文件恢复应用。 Elseplus File Recovery App 4.4.21版本存在安全漏洞，该漏洞源于AndroidManifest.xml组件导出不当，攻击者可本地利用该缺陷。

Description (English)

Elseplus File Recover App is an application from the personal developer of elseplus lib. There is a security loophole in Elsepuls File Return App 4.4.21, which stems from the improper export of Android Manifest.xml components, which can be used locally by the attackers.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-08-18

Last Modified

2026-02-24

References

https://github.com/KMov-g/androidapps/blob/main/com.elseplus.filerecovery.md https://github.com/KMov-g/androidapps/blob/main/com.elseplus.filerecovery.md#steps-to-reproduce https://vuldb.com/?ctiid.320420 https://vuldb.com/?submit.627902 https://vuldb.com/?id.320420 https://nvd.nist.gov/vuln/detail/CVE-2025-9098

Share on: