Insecure Register Receiver Flag

MOBILE_CLIENT/ANDROID/_MEDIUM/INSECURE_REGISTER_RECEIVER_FLAG/description.md

@@ -0,0 +1,6 @@
+The application calls the registerReceiver method with the argument flags set to RECEIVER_EXPORTED, which can be exploitable as it exposes the BroadcastReceiver to external applications, potentially leading to unauthorized access and security vulnerabilities.
+
+=== "Java"
+	```java
+    context.registerReceiver(broadcastReceiver, intentFilter, RECEIVER_EXPORTED);
+    ```

MOBILE_CLIENT/ANDROID/_MEDIUM/INSECURE_REGISTER_RECEIVER_FLAG/meta.json

@@ -0,0 +1,27 @@
+{
+  "risk_rating": "medium",
+  "short_description": "The application calls the registerReceiver method with the argument flags set to RECEIVER_EXPORTED.",
+  "references": {
+    "Shared Preferences (Android Developer)": "https://developer.android.google.cn/about/versions/13/features#runtime-receivers"
+  },
+  "title": "Insecure Register Receiver Flag",
+  "privacy_issue": false,
+  "security_issue": true,
+  "categories": {
+    "OWASP_MASVS_L1": [
+      "MSTG_PLATFORM_4"
+    ],
+    "OWASP_MASVS_L2": [
+      "MSTG_PLATFORM_4"
+    ],
+    "GDPR": [
+      "ART_32"
+    ],
+    "PCI_STANDARDS":[
+      "REQ_2_2",
+      "REQ_6_2",
+      "REQ_6_3",
+      "REQ_11_3"
+    ]
+  }
+}

MOBILE_CLIENT/ANDROID/_MEDIUM/INSECURE_REGISTER_RECEIVER_FLAG/recommendation.md

@@ -0,0 +1,11 @@
+To mitigate risks associated with exporting receivers in Android applications, export only when essential. Additionally, ensure the exported BroadcastReceiver is protected with the necessary permissions to minimize potential security vulnerabilities.
+
+=== "XML"
+	```xml
+    <receiver android:name=".MyReceiver" android:exported="true">
+        <intent-filter>
+            <action android:name="android.intent.action.ACTION1" />
+            <action android:name="android.intent.action.ACTION2" />
+        </intent-filter>
+    </receiver>
+    ```