CVE-2024-54461
📋 TL;DR
This vulnerability in the file_selector package allows malicious document providers to manipulate file names, potentially overriding internal app cache files. It affects Flutter apps using vulnerable versions of file_selector_android on Android devices. Users with malicious document providers installed are at risk.
💻 Affected Systems
- file_selector_android (Flutter package)
📦 What is this software?
⚠️ Risk & Real-World Impact
Worst Case
Malicious document provider could overwrite critical app cache files, leading to data corruption, app crashes, or potential code execution within app context.
Likely Case
Malicious document provider could manipulate file operations to access or modify app data, potentially exposing sensitive information stored in cache.
If Mitigated
With proper input validation and file path sanitization, the vulnerability is prevented, maintaining normal app functionality.
🎯 Exploit Status
Exploitation requires user to install malicious document provider and use it within vulnerable app. No public exploit code available.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 0.5.1+12 or later
Vendor Advisory: https://github.com/flutter/packages/security/advisories/GHSA-r465-vhm9-7r5h
Restart Required: No
Instructions:
1. Update pubspec.yaml to use file_selector_android: ^0.5.1+12
2. Run 'flutter pub get'
3. Rebuild and redeploy your Flutter application
🔧 Temporary Workarounds
Implement custom file path validation
allAdd manual sanitization checks for file paths before processing in your app code
// Add validation logic in your file handling code
// Check for path traversal attempts and malicious characters
🧯 If You Can't Patch
- Restrict app permissions to minimize cache access
- Implement runtime file path validation and monitoring
🔍 How to Verify
Check if Vulnerable:
Check pubspec.lock for file_selector_android version below 0.5.1+12Check Version:
grep file_selector_android pubspec.lockVerify Fix Applied:
Verify file_selector_android version is 0.5.1+12 or higher in pubspec.lock📡 Detection & Monitoring
Log Indicators:
- Unusual file access patterns in app cache
- File operations with suspicious path characters
Network Indicators:
- No network indicators - local file system vulnerability
SIEM Query:
App logs showing file operations with ../ or other path traversal patterns