CVE-2020-1904CWE-23

A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal…

published October 6, 2020

CVSS
—
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwriting files when sending specially crafted docx, xlsx, and pptx files as attachments to messages.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01114 · 65.8th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2020-10-06T17:35Z
EPSS history
Timeline
  • 06 OCT 17:35Z
    A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal…
    cvelistv5