A Google Drive weakness could allow attackers to serve malware

guest · Aug 23, 2020

A Google Drive weakness could allow attackers to serve malware
It hasn't been addressed so far
August 23, 2020
https://securityaffairs.co/wordpress/107437/hacking/google-drive-weakness.html

An unpatched weakness in Google Drive could be exploited by threat actors to distribute weaponized files disguised as legitimate documents or images.

The issue resides in the “manage versions” feature implemented in Google Drive allows users to upload and manage different versions of a file and in the interface that allows users to provides a new version of the files to the users.
The “manage versions” feature was designed to allow Google Drive users to update an older version of a file with a new one having the same file extension, unfortunately, this is not true.
Click to expand...

The researchers A. Nikoci, discovered that the functionally allows users to upload a new version with any file extension for any file stored on Google Drive, allowing the upload of malicious executables.

“Google lets you change the file version without checking if it’s the same type,” Nikoci explained. “They did not even force the same extension.”
Click to expand...

Log in or Sign up

A Google Drive weakness could allow attackers to serve malware

guest Guest

Log in or Sign up

A Google Drive weakness could allow attackers to serve malware

guest Guest

Useful Searches