CVE-2017-20102

Name of the Vulnerable Software and Affected Versions Album Lock version 4.0

Description A critical issue was found in Album Lock, affecting some unknown functionality of the file /getImage. The manipulation of the argument filePaht leads to path traversal. This issue requires local attacking to be exploited. The exploit has been disclosed to the public and may be used.

Recommendations For Album Lock version 4.0, as a temporary workaround, consider restricting access to the /getImage file until a patch is available. Avoid using the filePaht argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.