Lucene search
+L

8 matches found

PyPA
PyPA
added 2026/07/13 3:19 p.m.24 views

Mobile Verification Toolkit (MVT): Path Traversal via unsanitized File identifiers in iOS Backup processing

SummaryThe fileID field from Manifest.db a SQLite database inside iOS backups, generated by the device is used directly in filesystem path construction without validation. This affects two commands through a shared code path:- mvt-ios decrypt-backup decrypt.py: fileid is used to construct both re...

5.3CVSS6.5AI score0.00376EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder