Directory traversal possible on world name input box in MCPE
(Note:This affects MCPE, the option for this on the issue log was not present)
On the latest version of MCPE 0.9.4 for Android you can use for example ../../ as the world name. This causes the world files to be generated outside of the games folder. This could be used for malicious purposes.
2014-07-20, 12:27 AM
2014-07-20, 11:06 AM
2014-07-20, 11:06 AM
0
2
-