CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2024-57966: libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.

5.0 CVSS

Description

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.

CVSS Base Severity: MEDIUM

CVSS Base Score: 5.0

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L

Vendor: KDE

Product: ark

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 11.83% (scored less or equal to compared to others)

EPSS Date: 2025-03-04 (when was this score calculated)

2025-02-04 01:16:19 UTC
CVE

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.