CVE-2023-36612

Directory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for Android, which may allow an attacker to write arbitrary files in the application's private directory. Additionally, by using a malicious intent, the attacker may redirect the server's responses containing...

CVE-2023-36612

The CVE-2023-36612 vulnerability affects the Basecamp com.basecamp.bc3 Android app prior to version 4.2.1, as reported across multiple sources. The issue enables directory traversal, allowing an attacker to write arbitrary files in the app’s private directory. In addition, an attacker could explo...