exploitDog

CVE-2020-23172

Опубликовано: 10 авг. 2021

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with crafted Zip files due to improper validation of file paths in .zip archives.

Ссылки

https://github.com/kuba--/zip/issues/123
Exploit
Issue Tracking
Third Party Advisory
https://github.com/kuba--/zip/issues/123
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:kuba_project:kuba:*:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00505

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-qp9p-388h-gp24

github

больше 3 лет назад

A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with crafted Zip files due to improper validation of file paths in .zip archives.

EPSS

Процентиль: 66%

0.00505

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-22