CVSS 3.1
3.9 lowCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:LCVE-2020-11736
Low (3.9). EPSS 0.8% chance of exploitation in the next 30 days.
fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-22, CWE-59
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- debian:debian_linux
- gnome:file-roller