CVE-2017-15309

CVE-2017-15309 corresponds to a path traversal vulnerability in Huawei iReader (pre-8.0.2.301). The issue arises from insufficient validation of file storage paths, allowing an attacker to store downloaded malicious files in arbitrary directories. ZDI advisories confirm local exploitation vectors...