CVSS 3.1
3.3 lowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NCVE-2020-16116
Low (3.3). EPSS 1.7% chance of exploitation in the next 30 days.
In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal.
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- debian:debian_linux
- fedoraproject:fedora
- kde:ark
- opensuse:leap
References
- http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00023.html
- https://github.com/KDE/ark/commits/master
- https://invent.kde.org/utilities/ark/-/commit/0df592524fed305d6fbe74ddf8a196bc9ffdb92f
- https://kde.org/info/security/advisory-20200730-1.txt
- https://lists.debian.org/debian-lts-announce/2022/05/msg00026.html