Описание
aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part,
| Релиз | Статус | Примечание |
|---|---|---|
| devel | needs-triage | |
| esm-apps/jammy | needs-triage | |
| esm-apps/noble | needs-triage | |
| esm-apps/resolute | needs-triage | |
| jammy | needs-triage | |
| noble | needs-triage | |
| oracular | ignored | end of life, was needs-triage |
| plucky | ignored | end of life, was needs-triage |
| questing | ignored | end of life, was needs-triage |
| resolute | needs-triage |
Показывать по
10
Ссылки на источники
EPSS
Процентиль: 45%
0.00592
Низкий
5.8 Medium
CVSS3
Связанные уязвимости
CVSS3: 5.8
nvd
около 1 года назад
aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part,
CVSS3: 5.8
debian
около 1 года назад
aerc before 93bec0d allows directory traversal in commands/msgview/ope ...
CVSS3: 5.8
github
около 1 года назад
aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the name of an attachment part,
EPSS
Процентиль: 45%
0.00592
Низкий
5.8 Medium
CVSS3