CVE-2025-14617
Last modified
CVE-2025-14617 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. A vulnerability has been found in Jehovahs Witnesses JW Library App up to 15.5.1 on Android. Affected is an unknown function of the component org.jw.jwlibrary.mobile.activity.SiloContainer. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
A vulnerability has been found in Jehovahs Witnesses JW Library App up to 15.5.1 on Android. Affected is an unknown function of the component org.jw.jwlibrary.mobile.activity.SiloContainer. Such manipulation leads to path traversal. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-14617?
How severe is CVE-2025-14617?
How do I fix CVE-2025-14617?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-14611Gladinet CentreStack and Triofox prior to version 16.12.1042…9.8
- CVE-2025-14612Insecure Temporary File vulnerability in Altera Quartus Prim…6.7
- CVE-2025-14613The GetContentFromURL plugin for WordPress is vulnerable to …7.2
- CVE-2025-14614Insecure Temporary File vulnerability in Altera Quartus Prim…6.7
- CVE-2025-14615The DASHBOARD BUILDER – WordPress plugin for Charts and Grap…7.1
- CVE-2025-14616The Recooty – Job Widget (Old Dashboard) plugin for WordPres…4.3
- CVE-2025-14618The Sweet Energy Efficiency plugin for WordPress is vulnerab…4.3
- CVE-2025-14619A vulnerability was found in code-projects Student File Mana…9.8
- CVE-2025-14620A vulnerability was determined in code-projects Student File…9.8
- CVE-2025-14621A vulnerability was identified in code-projects Student File…9.8
- CVE-2025-14622A security flaw has been discovered in code-projects Student…9.8
- CVE-2025-14623A weakness has been identified in code-projects Student File…9.8
Are you affected by CVE-2025-14617?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST