Description (CNA)
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Facebook / WhatsApp Business for Android | affected unspecified before v2.21.8.13 |
| Facebook / WhatsApp for Android | affected unspecified before v2.21.8.13 |
CWE
CWE-23
References
ADP enrichment
No English description supplied.