CVE-2014-8889

CVE-2014-8889 describes a sensitive information disclosure vulnerability in the Dropbox SDK for Android versions prior to 1.6.2. This medium-severity flaw (CVSS 5.3) could allow remote attackers to obtain confidential data through crafted malware or drive-by download attacks, requiring user interaction and high attack complexity. While the vulnerability has a high potential impact on confidentiality, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or ExploitDB. Despite its age, the vulnerability garnered some community discussion and media coverage at the time of its disclosure.