CVE-2020-1904
CVE-2020-1904
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Oct 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwriting files when sending specially crafted docx, xlsx, and pptx files as attachments to messages.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →