Blix
Monthly
Path traversal in Blix Email Blue Mail Calendar App 2.2.305 exposes the device filesystem to local attackers via the react-native-receive-sharing-intent component. The functions FileDirectory.getDataColumn and FileDirectory.getFileFromUri fail to sanitize the _display_name argument, allowing traversal sequences to escape the app's intended directory scope and access or overwrite arbitrary files reachable by the app's process. No active exploitation is confirmed in CISA KEV, though a public proof-of-concept is available on GitHub and the vendor did not respond to coordinated disclosure, leaving no official patch available.
Path traversal in Blix Email Blue Mail Calendar App 2.2.305 exposes the device filesystem to local attackers via the react-native-receive-sharing-intent component. The functions FileDirectory.getDataColumn and FileDirectory.getFileFromUri fail to sanitize the _display_name argument, allowing traversal sequences to escape the app's intended directory scope and access or overwrite arbitrary files reachable by the app's process. No active exploitation is confirmed in CISA KEV, though a public proof-of-concept is available on GitHub and the vendor did not respond to coordinated disclosure, leaving no official patch available.