Directory traversal

2020-10-0618:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

JSON

A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwriting files when sending specially crafted docx, xlsx, and pptx files as attachments to messages.

CPENameOperatorVersion
whatsapplt2.20.61
whatsapp_businesslt2.20.61

CPE	Name	Operator	Version
	whatsapp	lt	2.20.61
	whatsapp_business	lt	2.20.61

References

www.whatsapp.com/security/advisories/2020/