CVE-2023-3314CWE-78

A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s)

High · published July 3, 2023

CVSS v3.1
8.1
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutralization of external commands used to control the process execution of the .zip application allows an authorized user to obtain control of the .zip application to execute arbitrary commands or obtain elevation of system privileges.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00942 · 60.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2023-07-03T08:02Z
EPSS history
Timeline
  • 03 JUL 08:02Z
    A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s)
    cvelistv5