Skip to content
OpenAdvisories
High USN-6808-1 1 CVE

atril vulnerability

Published Jun 5, 2024 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Atril was vulnerable to a path traversal attack.
An attacker could possibly use this vulnerability to create arbitrary
files on the host filesystem with user privileges.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS atril 1.24.0-1ubuntu0.1
Ubuntu · 22.04 LTS 22.04:LTS atril 1.26.0-1ubuntu1.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS atril 1.12.2-1ubuntu0.3+esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS atril 1.20.1-2ubuntu2+esm1

Vulnerabilities 1

  • High 8.5
    CVE-2023-52076 Public exploit

    Remote Code Execution Vulnerability in Atril's EPUB ebook parsing

    Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists in versions of Atril prior to 1.26.2. This vulnerability is capable of writing arbitrary files anywh…

    mate-desktop atril atril atril Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-52076