The Stackfield Desktop App before 1.10.2 for macOS and Windows contains a path traversal vulnerability in certain decryption functionality when processing the filePath property. A malicious export can write arbitrary content to any path on the victim's filesystem.
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a, 1.10.1 |
Updated vendor and product information, specified affected version as 1.10.1, and noted that patch version 1.10.2 is available.
Initial creation
