Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-4129
HistorySep 18, 2008 - 12:00 a.m.

CVE-2008-4129

2008-09-1800:00:00
ubuntu.com
ubuntu.com
4

0.002 Low

EPSS

Percentile

55.5%

Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP
archives containing symbolic links, which allows remote authenticated users
to conduct directory traversal attacks and read arbitrary files via vectors
related to the archive upload (aka zip upload) functionality.

0.002 Low

EPSS

Percentile

55.5%