{"id":"CVE-2025-14617","state":"PUBLISHED","title":"Jehovahs Witnesses JW Library App org.jw.jwlibrary.mobile.activity.SiloContainer path traversal","description":"A vulnerability has been found in Jehovahs Witnesses JW Library App up to 15.5.1 on Android. Affected is an unknown function of the component org.jw.jwlibrary.mobile.activity.SiloContainer. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.","publishedAt":"2025-12-13T14:02:07.989Z","updatedAt":"2025-12-15T21:47:08.760Z","severity":{"score":4.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Jehovahs Witnesses JW Library App"],"affected":[{"vendor":"Jehovahs Witnesses","product":"JW Library App","versions":[{"version":"15.5.0","status":"affected"},{"version":"15.5.1","status":"affected"}],"modules":["org.jw.jwlibrary.mobile.activity.SiloContainer"]}],"references":["https://vuldb.com/?id.336303","https://vuldb.com/?ctiid.336303","https://vuldb.com/?submit.705077","https://github.com/Secsys-FDU/AF_CVEs/issues/1"],"weaknesses":["CWE-22"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/14xxx/CVE-2025-14617.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-14617","state":"PUBLISHED","datePublished":"2025-12-13T14:02:07.989Z","dateUpdated":"2025-12-15T21:47:08.760Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-12-12T20:51:49.244Z"},"containers":{"cna":{"title":"Jehovahs Witnesses JW Library App org.jw.jwlibrary.mobile.activity.SiloContainer path traversal","descriptions":[{"lang":"en","value":"A vulnerability has been found in Jehovahs Witnesses JW Library App up to 15.5.1 on Android. Affected is an unknown function of the component org.jw.jwlibrary.mobile.activity.SiloContainer. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used."}],"affected":[{"vendor":"Jehovahs Witnesses","product":"JW Library App","versions":[{"version":"15.5.0","status":"affected"},{"version":"15.5.1","status":"affected"}],"modules":["org.jw.jwlibrary.mobile.activity.SiloContainer"]}],"references":[{"url":"https://vuldb.com/?id.336303","name":"VDB-336303 | Jehovahs Witnesses JW Library App org.jw.jwlibrary.mobile.activity.SiloContainer path traversal","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.336303","name":"VDB-336303 | CTI Indicators (IOB, IOC, TTP)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.705077","name":"Submit #705077 | Jehovah’s Witnesses(https://www.jw.org/finder?docid=802013031) JW Library APP (org.jw.jwlibrary.mobile) V15.5.1 Path Traversal","tags":["third-party-advisory"]},{"url":"https://github.com/Secsys-FDU/AF_CVEs/issues/1","tags":["exploit","issue-tracking"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":4.8,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":5.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.3,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4.3,"vectorString":"AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","type":"CWE","lang":"en","description":"Path Traversal"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-12-13T14:02:07.989Z"},"timeline":[{"time":"2025-12-12T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-12-12T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-12-12T21:56:59.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Lu1u (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-12-15T21:46:58.355701Z","id":"CVE-2025-14617","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-12-15T21:47:08.760Z"}}]}}}