Отправить #706220: Smartbit(http://www.smartschool.be/) Smartschool (be.smartschool.mobile) V10.4.4 Path TraversalИнформация

НазваниеSmartbit(http://www.smartschool.be/) Smartschool (be.smartschool.mobile) V10.4.4 Path Traversal
ОписаниеThe Smartschool app lacks proper security checks during the file import process, allowing unauthorized apps to control the file name and content and use path traversal to overwrite arbitrary files in the app’s internal storage, which may lead to arbitrary code execution, exposure of sensitive information, denial of service, and other security impacts.
Источник⚠️ https://github.com/Secsys-FDU/AF_CVEs/issues/4
Пользователь
 Lu1u (UID 92433)
Представление04.12.2025 14:37 (10 месяцы назад)
Модерация14.12.2025 19:42 (10 days later)
Статуспринято
Запись VulDB336419 [Smartbit CommV Smartschool App до 10.4.4 be.smartschool.mobile.SplashActivity обход каталога]
Баллы18

Want to stay up to date on a daily basis?

Enable the mail alert feature now!