CVE-2021-24035
- State
- Published
- Severity
- Not scored
- Published
- Jun 11, 2021
- Updated
- Aug 3, 2024
- Reserved
- Jan 13, 2021
Description
A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.
Scores
The record has no CVSS score.
Weaknesses
- CWE-23 Relative Path Traversal
Affected Products
| Product | Versions |
|---|---|
WhatsApp Business for AndroidFacebook |
|
WhatsApp for AndroidFacebook |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.