{ "id": "CVE-2024-25466", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-16T09:15:08.663", "lastModified": "2024-02-16T13:37:51.433", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbitrary code via a crafted script to the Android library component." }, { "lang": "es", "value": "La vulnerabilidad de Directory Traversal en React Native Document Picker anterior a v.9.1.1 y corregida en v.9.1.1 permite a un atacante local ejecutar c\u00f3digo arbitrario a trav\u00e9s de un script manipulado en el componente de librer\u00eda de Android." } ], "metrics": {}, "references": [ { "url": "https://github.com/FixedOctocat/CVE-2024-25466/tree/main", "source": "cve@mitre.org" }, { "url": "https://github.com/rnmods/react-native-document-picker/blob/0be5a70c3b456e35c2454aaf4dc8c2d40eb2ab47/android/src/main/java/com/reactnativedocumentpicker/RNDocumentPickerModule.java", "source": "cve@mitre.org" } ] }