CVE-2020-11736

Katalog CVE

CVSS 3.9 · Low EPSS 0,77%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada gnome file-roller, debian linux +1 lainnya. Skor CVSS 3.1 3.9 (Low) menurut NVD.

Deskripsi (NVD)

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

Rincian

Terbit di NVD

13 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.9 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-59: Improper Link Resolution Before File Access ('Link Following')

EPSS (30 hari)

0,77% peluang dieksploitasi; lebih tinggi dari 54,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gitlab.gnome.org/GNOME/file-roller/-/commit/21dfcdbfe258984db89fb65243a1a888924e45a0 patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/04/msg00013.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202009-06 advisory pihak ketiga
• https://usn.ubuntu.com/4332-1/ advisory pihak ketiga
• https://usn.ubuntu.com/4332-2/ advisory pihak ketiga