CVE-2025-14617 in JW Library App

Riassunto

di MITRE • 13/12/2025

A vulnerability has been found in Jehovahs Witnesses JW Library App up to 15.5.1 on Android. Affected is an unknown function of the component org.jw.jwlibrary.mobile.activity.SiloContainer. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: VulDB
• Divulgazione: 13/12/2025
• Moderazione: accettato
• Voce: VDB-336303
• CPE: pronto
• CWE: CWE-22 (confermato)
• Sfruttamento: Scaricare
• CVSS: 5.3 (CNA)
• EPSS: 0.00148
• KEV: no
• Attività: molto basso
• Settore: Chemical, Energy, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-14617
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-14617
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-14617/