CVE-2023-46918

Summary

CVE-2023-46918 is a vulnerability affecting Phlox's Simple HTTP Server PLUS (com.phlox.simpleserver.plus) version 1.8.1-plus. The issue lies in the AndroidManifest.xml file, which has the android:allowBackup attribute set to true. An attacker with physical access to the device can exploit this vulnerability to initiate a backup of the application's data, potentially gaining sensitive information or installing malware.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.