CVE-2010-1512
tatsuhiro tsujikawa aria2: no CVSS score yet. EPSS 3.2% chance of exploitation in the next 30 days.
Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.
- EPSS
- 3.2% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- tatsuhiro_tsujikawa:aria2
References
- http://downloads.sourceforge.net/project/aria2/stable/aria2-1.9.3/NEWS
- http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041753.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041754.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041758.html
- http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html