Skip to content
AirDroid Web Application Authentication Flaw
bishopfox.com | vulnerability | #android | #vulnerability | #advisory | #session-hijacking | #airdroid | #jsonp
Summary
Technical advisory on AirDroid 3.0.4 and earlier: its web app relied on JSONP for cross-origin requests, letting a malicious page generate a valid session token and hijack full device functionality.
- Published
- Collected