The vulnerability in the `libarchiveplugin.cpp` script of the graphical tool for compressing and decompressing Ark files in the KDE desktop environment allows a attacker to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability in the libarchiveplugin.cpp script of the graphical tool for compressing and decompressing Ark files in the KDE desktop environment relates to the handling of relative paths. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected informati...

SUSE CVE-2020-24654

In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user's home directory...