bumptech / bumptech/glide

Broadcast receivers not protected with Permissions

Open
#4,760 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
35k
Forks
6.2k
Avg merge
1d 11h
Merged PRs (30d)
8

Description

Describe the bug
We are using Glide in our app, there is a bug reported by security scan. Broadcast receivers not protected with Permissions and can leak data to other apps.

Receiver name com.bumptech.glide.manager.DefaultConnectivityMonitor
Method - register()

If this is an issue, please provide a fix.
If not our security team needs an explanation on this to prove this as not issue.

Requesting your help with this.

To reproduce
Security scan by nowsecure and checkmarx.

Expected behavior
This vulnerability should not be reported in scan report.

Language version, developer tools
Android studio

OS/platform
Android

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.