CVE-2008-4129

no score yetEPSS 1.8%

Gallery before 1.5.9, and 2.x before 2.2.6, does not properly handle ZIP archives containing symbolic links, which allows remote authenticated users to conduct directory traversal attacks and read arbitrary files via vectors related to the archive upload (aka zip upload) functionality.

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2008-09-18
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

gallery:gallery

References

http://gallery.menalto.com/gallery_1.5.9_released
http://gallery.menalto.com/gallery_2.2.6_released
http://secunia.com/advisories/31912
http://secunia.com/advisories/32662
http://secunia.com/advisories/33144

Check your stack JSON