Shop App Pasteboard Data Privacy Issue
ID: 24f90057-1bdc-5b8e-b906-075f0f0c07cf
STIX ID: report--24f90057-1bdc-5b8e-b906-075f0f0c07cf
Feed Name: NCC Research
Threat Score
*A privacy vulnerability in Shopify's Shop mobile app caused clipboard/pasteboard contents matching a specific tracking-code JSON pattern to be automatically transmitted to Shopify's servers when adding a package, potentially exposing sensitive PII; NCC Group reported the issue and Shopify patched it in v2.27.1 following responsible disclosure (published July 2, 2021).*
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.