CVE-2020-9771 is not fixed correctly (2020)

[adib]

https://theevilbit.github.io/posts/cve_2020_9771/

[hashhar]

Wow. A "wontfix" for such a critical bug?

I just checked and there are quite a few apps that I've had to give full disk access to - some of which include applications running remote code or reading data from untrusted usb devices device.

Wonder what could go wrong.

[f3d46600-b66e]

Full disk access bypassing user permissions ... Is bad, even if "full disk access" to the app was indeed given.

This is not obvious when you allow terminal (or any other app) the disk access.

[TheSwordsman]

Too bad this was posted on a US holiday weekend. :(

[pengaru → TheSwordsman]

[2020]