Description

Detects Android content providers that are exported and accessible to other applications. Exported content providers can expose sensitive application data to unauthorized applications if not properly protected with permissions.

Detection Strategy

• Scans AndroidManifest.xml for declared content provider components

• Checks if provider has android:exported="true" or no export attribute with targetSdkVersion < 17

• Reports vulnerability if provider is accessible to external applications without adequate permission protection