Executive Summary

This vulnerability exists in ALEAPP (Android Logs Events And Protobuf Parser) through version 3.4.0, specifically in the NQ_Vault.py artifact parser. It involves a path traversal issue where the parser uses attacker-controlled file_name_from values from a database directly as the output filename. This allows an attacker to craft a path traversal payload (e.g., ../../../outside_written.bin) to write files outside the intended report output directory.

By exploiting this, an attacker can write arbitrary files to locations outside the designated directory, potentially overwriting executable files or configuration files.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to arbitrary file writes outside the intended directory, which may allow an attacker to overwrite critical executable or configuration files.

This could result in code execution, compromising the security and integrity of the affected system.

Useful 0 Not Useful 0