pentester.land· Apr 21, 2021· by Alexander Heinrich, Matthias Hollick, Thomas Schneider, Milan Stute, Christian Weinert

PrivateDrop: Breaking and Fixing Apple AirDrop

Target Program: Apple

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Privacy issue#Information disclosure