CVE-2018-8909

CVE-2018-8909 affects the Wire app for Android prior to 2018-03-07, enabling a path traversal via a ../ in the filename of a received file (AssetService.scala) to write outside the downloads directory. This is described consistently across multiple sources (NVD/NVD mirror, Red Hat, Alpine Linux, ...