提出 #705077: Jehovah’s Witnesses(https://www.jw.org/finder?docid=802013031) JW Library APP (org.jw.jwlibrary.mobile) V15.5.1 Path Traversal情報

タイトルJehovah’s Witnesses(https://www.jw.org/finder?docid=802013031) JW Library APP (org.jw.jwlibrary.mobile) V15.5.1 Path Traversal
説明The JW Library app lacks proper security checks during the file import process, allowing unauthorized apps to control the file name and content and use path traversal to overwrite arbitrary files in the app’s internal storage, which may lead to arbitrary code execution, exposure of sensitive information, denial of service, and other security impacts.
ソース⚠️ https://github.com/Secsys-FDU/AF_CVEs/issues/1
ユーザー
 Lu1u (UID 92433)
送信2025年12月02日 14:41 (10 月 ago)
モデレーション2025年12月12日 21:51 (10 days later)
ステータス承諾済み
VulDBエントリ336303 [Jehovahs Witnesses JW Library App 迄 15.5.1 上 Android org.jw.jwlibrary.mobile.activity.SiloContainer ディレクトリトラバーサル]
ポイント18

Do you need the next level of professionalism?

Upgrade your account now!