Soumettre #705077: Jehovah’s Witnesses(https://www.jw.org/finder?docid=802013031) JW Library APP (org.jw.jwlibrary.mobile) V15.5.1 Path Traversalinformation

TitreJehovah’s Witnesses(https://www.jw.org/finder?docid=802013031) JW Library APP (org.jw.jwlibrary.mobile) V15.5.1 Path Traversal
DescriptionThe JW Library app lacks proper security checks during the file import process, allowing unauthorized apps to control the file name and content and use path traversal to overwrite arbitrary files in the app’s internal storage, which may lead to arbitrary code execution, exposure of sensitive information, denial of service, and other security impacts.
La source⚠️ https://github.com/Secsys-FDU/AF_CVEs/issues/1
Utilisateur
 Lu1u (UID 92433)
Soumission02/12/2025 14:41 (il y a 10 mois)
Modérer12/12/2025 21:51 (10 days later)
StatutAccepté
Entrée VulDB336303 [Jehovahs Witnesses JW Library App jusqu’à 15.5.1 sur Android org.jw.jwlibrary.mobile.activity.SiloContainer directory traversal]
Points18

Want to know what is going to be exploited?

We predict KEV entries!