JVN#51285738: tetra filer vulnerable to directory traversal

tetra filer provided by Yuichiro Okuyama contains an issue in processing file names, which may result in a directory traversal (CWE-22) vulnerability.

Impact

A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application has privileges to access.

Solution

Apply an update
Update to the latest version according to the information provided by the developer.

Products Affected

For Android OS version 4.0.3 and later:

• tetra filer version 2.3.1 and earlier

• tetra filer free version 2.3.1 and earlier
  For Android OS version Prior to 4.0.3:

• tetra filer version 1.5.1 and earlier

• tetra filer free version 1.5.1 and earlier