Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-11736

Опубликовано: 13 апр. 2020
Источник: nvd
CVSS3: 3.9
CVSS2: 3.3
EPSS Низкий

Описание

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnome:file-roller:*:*:*:*:*:*:*:*
Версия до 3.36.1 (включая)
Конфигурация 2
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 19%
0.0006
Низкий

3.9 Low

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 3.9
ubuntu
больше 5 лет назад

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

CVSS3: 3.9
redhat
больше 5 лет назад

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

CVSS3: 3.9
debian
больше 5 лет назад

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Dir ...

suse-cvrf
больше 5 лет назад

Security update for file-roller

CVSS3: 3.9
github
больше 3 лет назад

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

EPSS

Процентиль: 19%
0.0006
Низкий

3.9 Low

CVSS3

3.3 Low

CVSS2

Дефекты

CWE-22