| عنوان | PhonePe Private Limited PhonePe Android App 25.03.21.0 Information Disclosure |
|---|
| الوصف | The PhonePe Android app (v25.03.21.0) stores authentication tokens, KYC metadata, and personally identifiable information (PII) in plaintext within local SQLite databases. Attackers with root access can extract this data and use it to access user accounts via production APIs. This results in account takeover and identity theft.
|
|---|
| المصدر | ⚠️ https://github.com/honestcorrupt/-Insecure-Local-Storage-of-Sensitive-User-Data-in-PhonePe-Android-App-Unpatched- |
|---|
| المستخدم | honest_corrupt (UID 85229) |
|---|
| ارسال | 13/05/2025 09:27 AM (1 سنة منذ) |
|---|
| الاعتدال | 25/05/2025 12:21 AM (12 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 310242 [PhonePe App 25.03.21.0 على Android SQLite Database databases الكشف عن المعلومات] |
|---|
| النقاط | 18 |
|---|