Common Weakness Enumeration
CWE-925 Improper Verification of Intent by Broadcast Receiver
Description
The Android application uses a Broadcast Receiver that receives an Intent but does not properly verify that the Intent came from an authorized source.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-925 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-qcfx-2mfw-w4cg | CVE-2026-33173 | MODERATE |
Rails Active Storage has possible content type bypass via metadata in direct uploads |
2026-05-13 |