CVE-2020-23172

2021-08-1015:06:20

mitre

www.cve.org

vulnerability

kuba

file overwrite

zip files

improper validation

.zip archives

EPSS

0.001

Percentile

23.4%

JSON

A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with crafted Zip files due to improper validation of file paths in .zip archives.

References

github.com/kuba--/zip/issues/123

EPSS

0.001

Percentile

23.4%

JSON

Related for CVELIST:CVE-2020-23172