CVE-2020-23172

The CVE-2020-23172 entry affects Kuba and stems from improper validation of file paths in .zip archives, enabling attackers to overwrite arbitrary files in arbitrary directories by crafting Zip files. Affected software is Kuba (no vendor/version details provided in the documents). Consequences in...