Rapid7 Vulnerability & Exploit Database

Android Browser "Open in New Tab" Cookie Theft

Back to Search

Android Browser "Open in New Tab" Cookie Theft

Created
05/30/2018

Description

In Android's stock AOSP Browser application and WebView component, the "open in new tab" functionality allows a file URL to be opened. On versions of Android before 4.4, the path to the sqlite cookie database could be specified. By saving a cookie containing a