Hijacking PendingIntent in Galaxy Themes Allows Unauthorized Access to Private File Directories

CVE-2021-25353 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent.

Learn more about our Web Application Penetration Testing UK.