Ajith-Ab

**Name of the Vulnerable Software and Affected Versions** react-native-receive-sharing-intent (affected versions not specified) **Description** A path traversal issue exists where a co-resident malicious application can write files outside the intended cache directory. This occurs when a crafted ` display name` value containing dot-dot path components is supplied through a malicious ContentProvider. An attacker can trigger an explicit ACTION SEND intent at the exported share-receiver activity to overwrite arbitrary files within the application's private data directory, such as databases, shared preferences, and cached configurations, using attacker-controlled content. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.