CVE-2025-14702

CVE-2025-14702 affects the Smartbit CommV Smartschool App (versions up to 10.4.4) due to a path traversal flaw in the be.smartschool.mobile.SplashActivity. The root cause is a vulnerability in a SplashActivity component that can be manipulated locally to traverse file paths. Exploitation requires...