{ "id": "CVE-2024-25466", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-16T09:15:08.663", "lastModified": "2024-02-16T09:15:08.663", "vulnStatus": "Received", "descriptions": [ { "lang": "en", "value": "Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component." } ], "metrics": {}, "references": [ { "url": "https://github.com/FixedOctocat/CVE-2024-25466/tree/main", "source": "cve@mitre.org" }, { "url": "https://github.com/rnmods/react-native-document-picker/blob/0be5a70c3b456e35c2454aaf4dc8c2d40eb2ab47/android/src/main/java/com/reactnativedocumentpicker/RNDocumentPickerModule.java", "source": "cve@mitre.org" } ] }