Telegram Messenger For Android Directory Traversal

There is a directory traversal issue in the Telegram client for Android. The method saveFile in MediaController.java saves a file to external memory based on an optional name that is not filtered. The name is provided by the remote peer when sending a document or music file.


MD5 | 1d4fa9a377be38dd028f42d795557548


Related Posts

Comments