Fixing a Zip Path Traversal Vulnerability

Question:

The Google Play Console shows us this security warning: Fixing a Zip Path Traversal Vulnerability
This information is intended for developers with app(s) that contain unsafe unzipping patterns, which may potentially lead to a Zip Path Traversal attack. Please advise how we can fix it.

Answer:

This issue was fixed in 5.14.3 version of Pushwoosh Android SDK. In order to get rid of this warning, Pushwoosh SDK version in your app should be updated the latest one. You could found the recent one here:

https://github.com/Pushwoosh/pushwoosh-android-sdk

Comments

Have a question?

Articles in this section