CVE-2020-10870

Zim through 0.72.1 creates temporary directories with predictable names

Medium · published March 23, 2020

CVSS v3.0
5.5
EPSS
0%
Percentile
24.5
In the wild
Unconfirmed
What it is

Zim through 0.72.1 creates temporary directories with predictable names. A malicious user could predict and create Zim's temporary directories and prevent other users from being able to start Zim, resulting in a denial of service.

The record
Technical detail
CVSS v3.0
5.5 · MEDIUM
Vector
CVSS:3.0/AC:L/AV:L/A:H/C:N/I:N/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00327 · 24.5th percentile
Published
2020-03-23T19:07Z
EPSS history
Timeline
  • 23 MAR 19:07Z
    Zim through 0.72.1 creates temporary directories with predictable names
    cvelistv5