medium5.5
CVE-2020-23172
A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with crafted Zip files due to improper validatio…
Impact
A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with crafted Zip files due to improper validation of file paths in .zip archives.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kuba Project | Kuba | All versions |