CRITICAL 9.1
CVE-2021-24035
EN A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.
CVSS v3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Apps suivies affectées
Configurations CPE vulnérables
| Vendor | Produit | Plateforme | Versions | CPE 2.3 URI |
|---|---|---|---|---|
| Android | <2.21.8.13 | cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:-:android:*:* | ||
| whatsapp_business | Android | <2.21.8.13 | cpe:2.3:a:whatsapp:whatsapp_business:*:*:*:*:*:android:*:* |