VULNERABILITY INTELLIGENCE
CVE-2015-0557
CVSS score5.8 MEDIUM
EPSS probability3.34%
CISA KEVNot currently listed
Published2015-04-08
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:P
Description
Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.
Weakness classification
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')