CVE-2021-24035 - AskarLabs CVE Database

CVE-2021-24035

Vendor Facebook

Product WhatsApp Business for Android

Weakness CWE-23

Published June 11, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.

Key dates

02Disclosure timeline

June 11, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-24035 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/23.html

Identifiers

CVE CVE-2021-24035

CWE CWE-23

Affected versions

Vendor Facebook

Product WhatsApp Business for Android

Affected ≥ unspecified and < v2.21.8.13

Vendor Facebook

Product WhatsApp for Android

Affected ≥ unspecified and < v2.21.8.13