{"action":"created","issue":{"url":"https://api.github.com/repos/bugcrowd/vulnerability-rating-taxonomy/issues/150","repository_url":"https://api.github.com/repos/bugcrowd/vulnerability-rating-taxonomy","labels_url":"https://api.github.com/repos/bugcrowd/vulnerability-rating-taxonomy/issues/150/labels{/name}","comments_url":"https://api.github.com/repos/bugcrowd/vulnerability-rating-taxonomy/issues/150/comments","events_url":"https://api.github.com/repos/bugcrowd/vulnerability-rating-taxonomy/issues/150/events","html_url":"https://github.com/bugcrowd/vulnerability-rating-taxonomy/issues/150","id":314773464,"number":150,"title":"Add entry for - Mobile Security Misconfiguration > Copy/Paste Sensitive Data to Global Clipboard","user":{"login":"jquinard","id":26414827,"avatar_url":"https://avatars3.githubusercontent.com/u/26414827?v=4","gravatar_id":"","url":"https://api.github.com/users/jquinard","html_url":"https://github.com/jquinard","followers_url":"https://api.github.com/users/jquinard/followers","following_url":"https://api.github.com/users/jquinard/following{/other_user}","gists_url":"https://api.github.com/users/jquinard/gists{/gist_id}","starred_url":"https://api.github.com/users/jquinard/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jquinard/subscriptions","organizations_url":"https://api.github.com/users/jquinard/orgs","repos_url":"https://api.github.com/users/jquinard/repos","events_url":"https://api.github.com/users/jquinard/events{/privacy}","received_events_url":"https://api.github.com/users/jquinard/received_events","type":"User","site_admin":false},"labels":[{"id":770501092,"url":"https://api.github.com/repos/bugcrowd/vulnerability-rating-taxonomy/labels/needs%20discussion","name":"needs discussion","color":"eda67b","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/bugcrowd/vulnerability-rating-taxonomy/milestones/5","html_url":"https://github.com/bugcrowd/vulnerability-rating-taxonomy/milestone/5","labels_url":"https://api.github.com/repos/bugcrowd/vulnerability-rating-taxonomy/milestones/5/labels","id":3194232,"number":5,"title":"v1.5","description":null,"creator":{"login":"plr0man","id":24785104,"avatar_url":"https://avatars0.githubusercontent.com/u/24785104?v=4","gravatar_id":"","url":"https://api.github.com/users/plr0man","html_url":"https://github.com/plr0man","followers_url":"https://api.github.com/users/plr0man/followers","following_url":"https://api.github.com/users/plr0man/following{/other_user}","gists_url":"https://api.github.com/users/plr0man/gists{/gist_id}","starred_url":"https://api.github.com/users/plr0man/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/plr0man/subscriptions","organizations_url":"https://api.github.com/users/plr0man/orgs","repos_url":"https://api.github.com/users/plr0man/repos","events_url":"https://api.github.com/users/plr0man/events{/privacy}","received_events_url":"https://api.github.com/users/plr0man/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":2,"state":"open","created_at":"2018-03-16T19:28:02Z","updated_at":"2018-04-22T19:39:19Z","due_on":null,"closed_at":null},"comments":1,"created_at":"2018-04-16T18:45:36Z","updated_at":"2018-04-24T16:26:21Z","closed_at":null,"author_association":"NONE","body":"We currently don't have an entry for this vuln type. The idea is that if a mobile app allows copy/paste functionality on sensitive inputs (such as CC/SSN) a user could use the copy functionality which would leave the data exposed in the clipboard. Any rogue app on the victim's device can read the clipboard.\r\n\r\nThe barrier for exploitation is pretty high but there is a simple remediation for this on a per input basis. Initial general consensus for this seems to be P4."},"comment":{"url":"https://api.github.com/repos/bugcrowd/vulnerability-rating-taxonomy/issues/comments/383995398","html_url":"https://github.com/bugcrowd/vulnerability-rating-taxonomy/issues/150#issuecomment-383995398","issue_url":"https://api.github.com/repos/bugcrowd/vulnerability-rating-taxonomy/issues/150","id":383995398,"user":{"login":"SwayzeSlacks85","id":7257979,"avatar_url":"https://avatars1.githubusercontent.com/u/7257979?v=4","gravatar_id":"","url":"https://api.github.com/users/SwayzeSlacks85","html_url":"https://github.com/SwayzeSlacks85","followers_url":"https://api.github.com/users/SwayzeSlacks85/followers","following_url":"https://api.github.com/users/SwayzeSlacks85/following{/other_user}","gists_url":"https://api.github.com/users/SwayzeSlacks85/gists{/gist_id}","starred_url":"https://api.github.com/users/SwayzeSlacks85/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SwayzeSlacks85/subscriptions","organizations_url":"https://api.github.com/users/SwayzeSlacks85/orgs","repos_url":"https://api.github.com/users/SwayzeSlacks85/repos","events_url":"https://api.github.com/users/SwayzeSlacks85/events{/privacy}","received_events_url":"https://api.github.com/users/SwayzeSlacks85/received_events","type":"User","site_admin":false},"created_at":"2018-04-24T16:26:21Z","updated_at":"2018-04-24T16:26:21Z","author_association":"NONE","body":"We are definitely lacking mobile entries in the VRT and I think this would be a good addition. +1 for a P4."}}
{"actor":{"display_login":"SwayzeSlacks85"}}