Threats tagged 'ghsa-hg5v-m73p-68rg'

A SQL injection vulnerability exists in the push notification handler of the MatchPoint Android app. This component processes messages from Firebase Cloud Messaging and constructs SQL queries by concatenating untrusted data. An attacker who can interact with this component could manipulate these queries to access sensitive information stored locally on the device, including credentials. The impact is limited to the affected device and does not extend beyond it.