Directory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for Android, which may allow an attacker to write arbitrary files in the application's private directory. Additionally, by using a malicious intent, the attacker may redirect the server's responses (containing sensitive information) to third-party applications by using a custom-crafted deeplink scheme.
References
| Link | Resource |
|---|---|
| https://hackerone.com/reports/1710541 | Exploit Third Party Advisory |
| https://hackerone.com/reports/1710541 | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 08:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://hackerone.com/reports/1710541 - Exploit, Third Party Advisory |
30 Jun 2023, 21:22
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Basecamp basecamp
Basecamp |
|
| CPE | cpe:2.3:a:basecamp:basecamp:*:*:*:*:*:android:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-22 | |
| References | (MISC) https://hackerone.com/reports/1710541 - Exploit, Third Party Advisory |
25 Jun 2023, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-25 03:15
Updated : 2024-11-21 08:10
NVD link : CVE-2023-36612
Mitre link : CVE-2023-36612
CVE.ORG link : CVE-2023-36612
JSON object : View
Products Affected
basecamp
- basecamp
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')