mobsf.mobsfscan.android.word_readable_writable.world_readable

profile photo of MobSFMobSF
Author
unknown
Download Count*
GPLv3
License

The file is World Readable. Any App can read from the file.

Run Locally

Run in CI

Semgrep CI docs

Defintion

Edit RuleView Source
Open in Playground 
rules:
  - id: world_readable
    patterns:
      - pattern-either:
          - pattern: |
              Context.MODE_WORLD_READABLE
    message: The file is World Readable. Any App can read from the file.
    languages:
      - java
    severity: WARNING
    metadata:
      cwe: cwe-276
      owasp-mobile: m2
      masvs: storage-2
      reference: https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#testing-local-storage-for-sensitive-data-mstg-storage-1-and-mstg-storage-2
      license: LGPL-3.0-or-later