CVE-2025-14617 | THREATINT

Description

A vulnerability has been found in Jehovahs Witnesses JW Library App up to 15.5.1 on Android. Affected is an unknown function of the component org.jw.jwlibrary.mobile.activity.SiloContainer. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

PUBLISHED Reserved 2025-12-12 | Published 2025-12-13 | Updated 2025-12-15 | Assigner VulDB

MEDIUM: 4.8CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

MEDIUM: 5.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

MEDIUM: 5.3CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

4.3AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Problem types

Path Traversal

Product status

15.5.0

affected

15.5.1

affected

Timeline

2025-12-12:	Advisory disclosed
2025-12-12:	VulDB entry created
2025-12-12:	VulDB entry last update

Credits

Lu1u (VulDB User) reporter

References

vuldb.com/?id.336303 (VDB-336303 | Jehovahs Witnesses JW Library App org.jw.jwlibrary.mobile.activity.SiloContainer path traversal) vdb-entry

vuldb.com/?ctiid.336303 (VDB-336303 | CTI Indicators (IOB, IOC, TTP)) signature permissions-required

vuldb.com/?submit.705077 (Submit #705077 | Jehovah’s Witnesses(https://www.jw.org/finder?docid=802013031) JW Library APP (org.jw.jwlibrary.mobile) V15.5.1 Path Traversal) third-party-advisory

github.com/Secsys-FDU/AF_CVEs/issues/1 exploit issue-tracking

cve.org (CVE-2025-14617)

nvd.nist.gov (CVE-2025-14617)

Download JSON