CVE-2020-23172

5.5 mediumEPSS 0.7%

Medium (5.5) in kuba project kuba. EPSS 0.7% chance of exploitation in the next 30 days.

A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with crafted Zip files due to improper validation of file paths in .zip archives.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2021-08-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kuba_project:kuba

References

https://github.com/kuba--/zip/issues/123
https://github.com/kuba--/zip/issues/123

Check your stack JSON