Description
A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with crafted Zip files due to improper validation of file paths in .zip archives.
Unscored
CVE-2020-23172
EUVD-2020-15925GHSA-qp9p-388h-gp24
A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with crafted Zip files due t…
Published Aug 10, 2021 · Updated Aug 4, 2024 · Assigned by mitre