This vulnerability in Blix Email Blue Mail Calendar App 2.2.305 involves improper handling of the _display_name argument in the FileDirectory.getDataColumn and FileDirectory.getFileFromUri functions of the react-native-receive-sharing-intent component. This allows an attacker with local access to perform path traversal attacks, potentially accessing files outside the intended directory. The exploit is publicly known, but no official remediation or patch has been provided by the vendor as of the publication date.

An attacker with local access can exploit this vulnerability to perform path traversal, potentially accessing or manipulating files outside the intended scope within the application environment. The impact is limited by the requirement for local access and the medium severity rating. There is no indication of remote exploitation or privilege escalation beyond local user privileges.

No official fix or patch is currently available, and the vendor has not responded to the disclosure. Users should restrict local access to trusted parties and monitor for suspicious activity. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.