MindManager Windows Directory Traversal Vulnerability Allowing Arbitrary File Write

A directory traversal vulnerability has been identified in MindManager for Windows, affecting versions prior to 24.1.150. This vulnerability allows attackers to write to unintended directories on the victim's machine. The issue arises when a user opens file attachments contained within malicious mmap files.

Impact

Exploitation of this vulnerability could lead to unauthorized writing of files in unexpected directories on the victim's machine.

Reproduction

To reproduce this vulnerability, open a malicious mmap file that contains file attachments. When the file attachments are opened, the vulnerability is triggered, allowing for directory traversal and arbitrary file writing.