VULNERABILITY INTELLIGENCE

CVE-2020-23172

CVSS score5.5 MEDIUM
EPSS probability0.74%
CISA KEVNot currently listed
Published2021-08-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with crafted Zip files due to improper validation of file paths in .zip archives.

Weakness classification

  • nvd@nist.gov: CWE-22

Primary references