HTTP-FS-file-server
HTTP-FS-file-server copied to clipboard
Vulnerable to Authentication bypass by HTTP verb tampering
In app android-tv v.1.1.4 a vulnerability found in http auth. This allow a atacker access to sensibility information.
For mitigate: Ensure that only legitimate HTTP verbs are allowed Do not use HTTP verbs as factors in access decisions.
This dont modify in app or for user.
Resoueses: https://capec.mitre.org/data/definitions/274.html