CVE-2015-0557

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks…

published April 8, 2015

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03343 · 88.6th percentile
Published
2015-04-08T18:00Z
EPSS history
Timeline
  • 08 APR 18:00Z
    Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks…
    cvelistv5