CVE-2018-16594

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal...

CVE-2018-16594

The Photo Sharing Plus component on Sony Bravia TV through 8.587 devices allows Directory Traversal...

CVE-2018-16594

CVE-2018-16594 describes a Directory Traversal vulnerability in Sony Bravia TV Photo Sharing Plus on the TV firmware up to version 8.587. The issue arises from how Photo Sharing Plus handles uploaded file names (e.g., crafted ../../), allowing access to restricted filesystem paths outside the int...