CVE-2020-23171

Опубликовано: 10 авг. 2021

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file.

Ссылки

https://github.com/nim-lang/zip/issues/54
Exploit
Issue Tracking
Third Party Advisory
https://github.com/nim-lang/zip/issues/54
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:nim-lang:nim-lang:*:*:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00587

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-610

Связанные уязвимости