CVE-2017-17715

The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows directory traversal via a pathname…

published December 16, 2017

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows directory traversal via a pathname obtained in a file-transfer request from a remote peer, as demonstrated by writing to tgnet.dat or tgnet.dat.bak.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01741 · 77.4th percentile
Published
2017-12-16T19:00Z
EPSS history
Timeline
  • 16 DEC 19:00Z
    The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows directory traversal via a pathname…
    cvelistv5