CVE-2021-34422

The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a file uploaded to a team folder. A malicious user could upload a file to a shared folder with a specially crafted file name which could allow a user to execute an application whi...

CVE-2021-34421: Incomplete Cleanup

The Keybase Client for Android before version 5.8.0 and the Keybase Client for iOS before version 5.8.0 fails to properly remove exploded messages initiated by a user if the receiving user places the chat session in the background while the sending user explodes the messages. This could lead to...

CVE-2021-34422: Improper Limitation of a Pathname to a Restricted Directory

The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a file uploaded to a team folder. A malicious user could upload a file to a shared folder with a specially crafted file name which could allow a user to execute an application whi...

PT-2021-7456

Name of the Vulnerable Software and Affected Versions Keybase Client for Android versions prior to 5.8.0 Keybase Client for iOS versions prior to 5.8.0 Description The issue arises from the incomplete cleanup of temporary or auxiliary resources, which could allow a remote attacker to disclose...

PT-2021-7421

Name of the Vulnerable Software and Affected Versions Keybase Client for Windows versions prior to 5.7.0 Description The issue is related to a path traversal vulnerability when checking the name of a file uploaded to a team folder. A malicious user could upload a file to a shared folder with a...