Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
CWE-23: Relative Path Traversal - The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
> HISTORIQUE DES MODIFICATIONS
Première apparition
05/08/2026 02:16
Source: NVD
📊
ENRICHISSEMENT
01/09/2026 06:02
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-23: Relative Path Traversal - The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that ...
Total des modifications: 1
Dernière mise à jour: 2 months ago