CVE-2021-20692

Katalog CVE

CVSS 7.1 · High EPSS 1,0%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada eikisoft archive collectively operation utility. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker to create or overwrite files by leading a user to expand a malicious ZIP archives.

Rincian

Terbit di NVD

7 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 61,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.eikisoft.com/release01.html release notes · advisory vendor
• https://jvn.jp/en/jp/JVN73236007/index.html advisory pihak ketiga