Approved changes feed: RSS · Atom

cpe:2.3:a:wire:wire:*:*:*:*:*:android:*:*

part: a version: * update: *

VendorWire (b242ea1e-cceb-5996-8a95-4e04b0582e80)
ProductWire (13efd9be-9067-5385-b604-dbe7620bc6da)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-8909 vulnerable 2026-06-08 05:12:06.687508 Details available
The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a filename of a received file, related to AssetService.scala.
Published: 2018-03-22T06:00:00.000Z
Updated: 2024-09-16T23:05:25.482Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.