PT-2013-5710
CVE-2013-5648
·
Published
2013-08-29
·
Updated
2013-08-30
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
libdigidoc versions 3.6.0.0
Description
The issue is related to an absolute path traversal vulnerability in the
handleStartDataFile function. This allows remote attackers to overwrite arbitrary files by using a filename that starts with a / (slash) or `` (backslash) in a DDOC file.Recommendations
For libdigidoc version 3.6.0.0, update to version 3.7.2 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾