PT-2024-18711
CVE-2024-20805
·
تاريخ النشر
2024-01-04
·
تاريخ التحديث
2024-04-02
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
MyFiles versions prior to SMR Jan-2024 Release 1 in Android 11 and Android 12
MyFiles version 14.5.00.21 in Android 13
Description
A path traversal vulnerability in the ZipCompressor of MyFiles allows local attackers to write arbitrary files. This issue affects MyFiles in Android 11, Android 12, and a specific version in Android 13.
Recommendations
For MyFiles versions prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, update to a version that includes the SMR Jan-2024 Release 1 or later.
For MyFiles version 14.5.00.21 in Android 13, update to a version later than 14.5.00.21.
As a temporary workaround, consider restricting access to the ZipCompressor component until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾