CVE-2019-14452

Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in a ZIP archive entry that is mishandled during extraction...

CVE-2019-14452

Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in a ZIP archive entry that is mishandled during extraction...

CVE-2019-14452

Sigil up to version 0.9.16 is affected by a directory traversal vulnerability that lets an attacker place arbitrary files by a crafted ZIP entry during extraction. Multiple sources (NVD/NIST, Mageia MGASA-2019-0249, Ubuntu USN-4085-1, OSV entries) confirm the issue and indicate the root cause is ...

Sigil Path Traversal Vulnerability

Sigil is an open source multi-platform ebook editor. Sigil suffers from a path traversal vulnerability. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An attacker could use this vulnerability to access...

UBUNTU-CVE-2019-14452

Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in a ZIP archive entry that is mishandled during extraction...

CVE-2019-14452

Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in a ZIP archive entry that is mishandled during extraction...