Priority MEDIUM 51
The implementation of backslash parsing in the Dart URI class for versions prior to 2.18 and Flutter versions prior to 3.30 differs from the WhatWG URL standards.
Flutter
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Flutter records in CISA KEVNo Flutter vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
Priority LOW 29
The Dart and Flutter SDKs provide software development kits for the Dart programming language.
TI-2024-36547 CVE-2024-54462
Unsanitized Filenames in Flutter package image_picker_android Allow File Overwrites
Priority LOW 11
The file names constructed within image_picker are missing sanitization checks leaving them vulnerable to malicious document providers.
TI-2024-36546 CVE-2024-54461
Unsanitized Filenames in Flutter package file_selector_android Allow File Overwrites
Priority LOW 11
The file names constructed within file_selector are missing sanitization checks leaving them vulnerable to malicious document providers.