CVE-2020-1904 - AskarLabs CVE Database

CVE-2020-1904

Vendor Facebook

Product WhatsApp for iOS

Weakness CWE-23

Published October 6, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwriting files when sending specially crafted docx, xlsx, and pptx files as attachments to messages.

Key dates

02Disclosure timeline

October 6, 2020 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-1904 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/23.html

Identifiers

CVE CVE-2020-1904

CWE CWE-23

Affected versions

Vendor Facebook

Product WhatsApp for iOS

Affected 2.20.61

Vendor Facebook

Product WhatsApp for iOS

Affected ≥ unspecified and < 2.20.61

Vendor Facebook

Product WhatsApp Business for iOS

Affected 2.20.61

Vendor Facebook

Product WhatsApp Business for iOS

Affected ≥ unspecified and < 2.20.61