| Titre | BETTER FITNESS LIMITED (https://atlaszz.com/) Galleryit - Photo Vault, Album (gallery.photogallery.pictures.vault.album) V1.3.8.2 Path Traversal |
|---|
| Description | The Galleryit - Photo Vault, Album app lacks proper security checks during the file import process, allowing unauthorized apps to control the file name and content and use path traversal to overwrite arbitrary files in the app’s internal storage, which may lead to arbitrary code execution, exposure of sensitive information, denial of service, and other security impacts. |
|---|
| La source | ⚠️ https://github.com/Secsys-FDU/AF_CVEs/issues/2 |
|---|
| Utilisateur | Lu1u (UID 92433) |
|---|
| Soumission | 04/12/2025 14:14 (il y a 10 mois) |
|---|
| Modérer | 14/12/2025 15:28 (10 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 336416 [atlaszz AI Photo Team Galleryit App 1.3.8.2 sur Android gallery.photogallery.pictures.vault.album directory traversal] |
|---|
| Points | 18 |
|---|