Telegram Messenger For Android Directory Traversal
Posted by deepcore on December 18, 2017 – 2:26 am
There is a directory traversal issue in the Telegram client for Android. The method saveFile in MediaController.java saves a file to external memory based on an optional name that is not filtered. The name is provided by the remote peer when sending a document or music file.
Post a reply
You must be logged in to post a comment.