Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
added 2025/07/10 1:30 a.m.4 views

CVE-2025-42970

SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an attacker could craft a malicious SAPCAR archive containing directory traversal sequences. When a high privileged victim extracts this malicious archive, it is then processed by SAPCAR on their system,...

5.8CVSS7AI score0.00292EPSS
Exploits0References1
Circl
Circl
added 2025/07/08 3:33 a.m.9 views

CVE-2025-42970

creationtimestamp| type| source ---|---|--- 2025-07-08 03:33:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltgejmilnq2o...

5.8CVSS4.8AI score0.00292EPSS
Exploits0References1
NVD
NVD
added 2025/07/08 1:15 a.m.6 views

CVE-2025-42970

SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an attacker could craft a malicious SAPCAR archive containing directory traversal sequences. When a high privileged victim extracts this malicious archive, it is then processed by SAPCAR on their system,...

5.8CVSS0.00292EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/07/08 12:36 a.m.3 views

CVE-2025-42970 Directory Traversal vulnerability in SAPCAR

SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an attacker could craft a malicious SAPCAR archive containing directory traversal sequences. When a high privileged victim extracts this malicious archive, it is then processed by SAPCAR on their system,...

5.8CVSS6.3AI score0.00292EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/07/08 12:36 a.m.15 views

CVE-2025-42970 Directory Traversal vulnerability in SAPCAR

SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an attacker could craft a malicious SAPCAR archive containing directory traversal sequences. When a high privileged victim extracts this malicious archive, it is then processed by SAPCAR on their system,...

5.8CVSS0.00292EPSS
Exploits0References2
CVE
CVE
added 2025/07/08 12:36 a.m.23 views

CVE-2025-42970

CVE-2025-42970 affects SAPCAR: vulnerability arises from improper sanitization of file paths during extraction, enabling a malicious archive with directory traversal sequences. When a high-privilege user extracts such an archive, SAPCAR processes it and files can be extracted outside the intended...

5.8CVSS6.4AI score0.00292EPSS
Exploits0References2
Rows per page
Query Builder