PT-2025-51117 · Jehovahs Witnesses · Jw Library App

Lu1U · Publicado 2025-12-13 · Atualizado 2025-12-13 · CVE-2025-14617

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Jehovahs Witnesses JW Library App versions up to 15.5.1

Description A path traversal issue exists in the Jehovahs Witnesses JW Library App on Android, affecting the component org.jw.jwlibrary.mobile.activity.SiloContainer. Exploitation of this issue requires local access. The exploit has been publicly disclosed.

Recommendations Update to a version later than 15.5.1.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2025-14617

Produtos afetados

Jw Library App

Referências · 7

• 🔥 https://github.com/Secsys-FDU/AF_CVEs/issues/1 · Exploit
• https://vuldb.com/?id.336303 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-14617 · Nota de Segurança
• https://vuldb.com/?submit.705077 · Nota
• https://twitter.com/CVEnew/status/1999865307985564021 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1999972357205557632 · Publicação no Twitter
• https://vuldb.com/?ctiid.336303 · Nota