Vulnerability · Published Jan 9, 2023 · Assigned by Zoom
CVE-2022-36928Path Traversal in Zoom for Android Clients
Medium 6.1
In plain English
A medium-severity security flaw in Zoom for Android from Zoom Video Communications Inc. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)0.3%top 78.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Zoom for Android clients before version 5.13.0 contain a path traversal vulnerability. A third party app could exploit this vulnerability to read and write to the Zoom application data directory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Zoom Video Communications Inc | Zoom for Android | unspecified – before 5.13.0 |
Weakness: CWE-35 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N