Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-3qry-aprj-nyc7 |
| Summary | Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ (dot dot slash) in a filename in an archive file, related to KNewsstuff downloads. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
|
| Exploits |
|
| Severity_range_score | 4.3 - 4.3 |
| Exploitability | 0.5 |
| Weighted_severity | 2.1 |
| Risk_score | 1.1 |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-3qry-aprj-nyc7 |