Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:45301
HistoryFeb 03, 2024 - 3:01 a.m.

Path Traversal

2024-02-0303:01:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
atril
path traversal
vulnerability
improper file path validation
arbitrary files
filesystem

CVSS3

8.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

AI Score

6.8

Confidence

High

EPSS

0.007

Percentile

80.3%

JSON

Atril is vulnerable to Path Traversal. The vulnerability is due to improper file path validation. The attacker can write arbitrary files anywhere on the filesystem to which the user opening a crafted document has access.

Related

osv 4
openvas 4
mageia 1
cve 1
redos 1
cvelist 1
nessus 4
debiancve 1
ubuntucve 1
prion 1
ubuntu 1
nvd 1
githubexploit 1
debian 1
osv
osv
atril - security update
2024-05-12 00:00:00
atril - security update
2024-06-14 00:00:00
CVE-2023-52076
2024-01-25 16:15:07
openvas
openvas
Ubuntu: Security Advisory (USN-6808-1)
2024-06-06 00:00:00
Mageia: Security Advisory (MGASA-2024-0224)
2024-06-17 00:00:00
Debian: Security Advisory (DSA-5688-1)
2024-05-13 00:00:00
mageia
mageia
Updated atril packages fix security vulnerability
2024-06-16 02:07:50
cve
cve
CVE-2023-52076
2024-01-25 16:15:07
redos
redos
ROS-20240412-03
2024-04-12 00:00:00
cvelist
cvelist
CVE-2023-52076 Remote Code Execution Vulnerability in Atril's EPUB ebook parsing
2024-01-25 15:30:12
nessus
nessus
Amazon Linux 2 : atril (ALASMATE-DESKTOP1.X-2024-006)
2024-02-20 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.10 : Atril vulnerability (USN-6808-1)
2024-06-05 00:00:00
Debian dsa-5688 : atril - security update
2024-05-12 00:00:00
debiancve
debiancve
CVE-2023-52076
2024-01-25 16:15:07
ubuntucve
ubuntucve
CVE-2023-52076
2024-01-25 00:00:00
prion
prion
Path traversal
2024-01-25 16:15:00
ubuntu
ubuntu
Atril vulnerability
2024-06-05 00:00:00
nvd
nvd
CVE-2023-52076
2024-01-25 16:15:07
githubexploit
githubexploit
Exploit for CVE-2023-44451
2024-01-17 05:50:38
debian
debian
[SECURITY] [DSA 5688-1] atril security update
2024-05-12 13:21:12

CVSS3

8.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

AI Score

6.8

Confidence

High

EPSS

0.007

Percentile

80.3%

JSON
Related for VERACODE:45301
osv4openvas4mageia1cve1redos1cvelist1nessus4debiancve1ubuntucve1prion1ubuntu1nvd1githubexploit1debian1