Skip to content
OpenAdvisories
High · 8.4 CVE-2026-70383 EUVD-2026-63374GHSA-48r4-r7pv-pj69

Arbitrary file overwrite vulnerability in DigiDoc4 client

Published Aug 20, 2026 · Updated Aug 26, 2026 · Assigned by ENISA

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estonian Information System Authority (RIA) DigiDoc4 client.

This issue affects DigiDoc4: from 4.0.0 before 4.11.0.

Affected products

VendorProductAffectedFixed
Estonian Information System Authority (RIA) DigiDoc4 4.0.0 – < 4.11.0 4.11.0

References