description: A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.
problem types: CWE-23: Relative Path Traversal
affected:
{
product: WhatsApp Business for Android
vendor: Facebook
versions:
lessThan: v2.21.8.13, status: affected, version: unspecified, versionType: custom
}
{
product: WhatsApp for Android
vendor: Facebook
versions:
lessThan: v2.21.8.13, status: affected, version: unspecified, versionType: custom
}
