Описание
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | not-affected | 4:18.12.3-0ubuntu1 |
| disco | not-affected | 4:18.12.3-0ubuntu1 |
| eoan | not-affected | 4:18.12.3-0ubuntu1 |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/bionic | released | 4:17.12.3-0ubuntu1+esm1 |
| esm-apps/focal | not-affected | 4:18.12.3-0ubuntu1 |
| esm-apps/jammy | not-affected | 4:18.12.3-0ubuntu1 |
| esm-apps/noble | not-affected | 4:18.12.3-0ubuntu1 |
Показывать по
EPSS
4.3 Medium
CVSS2
5.5 Medium
CVSS3
Связанные уязвимости
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1
okular version 18.08 and earlier contains a Directory Traversal vulner ...
EPSS
4.3 Medium
CVSS2
5.5 Medium
CVSS3