PT-2023-31511 · Deepin · Deepin-Compressor
CVSS v3.1
9.3
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Deepin-Compressor versions prior to 5.12.21
Description
The issue is related to a path traversal vulnerability in Deepin-Compressor, the default archive manager of Deepin Linux OS. This vulnerability can be exploited to achieve Remote Command Execution on the target system upon opening crafted archives.
Recommendations
For versions prior to 5.12.21, update to version 5.12.21 to address the issue.
At the moment, there are no known workarounds for this vulnerability.
Exploit
Correção
Path traversal
Relative Path Traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Deepin-Compressor