CVE-2020-10870
Zim through 0.72.1 creates temporary directories with predictable names
Medium · published March 23, 2020
What it is
Zim through 0.72.1 creates temporary directories with predictable names. A malicious user could predict and create Zim's temporary directories and prevent other users from being able to start Zim, resulting in a denial of service.
The record
Technical detail
- CVSS v3.0
- 5.5 · MEDIUM
- Vector
- CVSS:3.0/AC:L/AV:L/A:H/C:N/I:N/PR:L/S:U/UI:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00327 · 24.5th percentile
- Published
- 2020-03-23T19:07Z
EPSS history
Timeline