PT-2017-14966

Name of the Vulnerable Software and Affected Versions Telegram Messenger for Android versions prior to 2017-12-08 Description The issue concerns the saveFile method in MediaController.java, which allows directory traversal. This can be achieved via a pathname obtained in a file-transfer request...