Skip to content
OpenAdvisories
Unscored CVE-2020-1904 EUVD-2020-12730GHSA-v6f2-92p8-cg2q

A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for direct…

Published Oct 6, 2020 · Updated Aug 4, 2024 · Assigned by facebook

Vendor: Facebook Product: WhatsApp Business for iOS Product: WhatsApp for iOS Platform: iOS

Description

A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwriting files when sending specially crafted docx, xlsx, and pptx files as attachments to messages.

Affected products

VendorProductAffectedFixed
Facebook WhatsApp for iOS 2.20.61, unspecified – < 2.20.61 2.20.61
Facebook WhatsApp Business for iOS 2.20.61, unspecified – < 2.20.61 2.20.61

References