Office App
Monthly
Path traversal (CWE-22) in the Document Intake component of Polaris Office App 9.9.19 on Android lets a local, low-privileged actor write files outside the application's designated temporary directory by supplying a crafted _display_name value to com.infraware.service.m.n.a. There is no remote or network vector - exploitation requires local access to the device plus the low-privilege ability to invoke the Document Intake function (CVSS 3.1 AV:L/PR:L/UI:N), and the assessed impact is limited to low integrity and low availability with no confidentiality disclosure. A public exploit has been released (publicly available exploit code exists), but the risk is low: the vendor shipped a fix in version 9.9.22 that adds path validation, and the issue is not listed as confirmed actively exploited (CISA KEV) at time of analysis.
Path traversal (CWE-22) in the Document Intake component of Polaris Office App 9.9.19 on Android lets a local, low-privileged actor write files outside the application's designated temporary directory by supplying a crafted _display_name value to com.infraware.service.m.n.a. There is no remote or network vector - exploitation requires local access to the device plus the low-privilege ability to invoke the Document Intake function (CVSS 3.1 AV:L/PR:L/UI:N), and the assessed impact is limited to low integrity and low availability with no confidentiality disclosure. A public exploit has been released (publicly available exploit code exists), but the risk is low: the vendor shipped a fix in version 9.9.22 that adds path validation, and the issue is not listed as confirmed actively exploited (CISA KEV) at time of analysis.