Android Access to Arbitrary Content Provider Vulnerability

A common vulnerability in android apps that involves excessive Intents being passed to Android Content Provider.

If the app has rights to access a given content provider, then Intent Flags will dictate our access rights.

Proof Of Concept

Real-World Instances

• https://blog.oversecured.com/Oversecured-detects-dangerous-vulnerabilities-in-the-TikTok-Android-app/