CVE-2024-22405CWE-281

XADMaster may not apply quarantine attribute correctly to extracted files

Medium · published April 30, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
8.8
In the wild
Unconfirmed
What it is

XADMaster is an objective-C library for archive and file unarchiving and extraction. When extracting a specially crafted zip archive XADMaster may not apply quarantine attribute correctly. Such behaviour may circumvent Gatekeeper checks on the system. Only macOS installations are affected. This issue was fixed in XADMaster 1.10.8. It is recommended to upgrade to the latest version. There are no known workarounds for this issue.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00196 · 8.8th percentile
Weakness
CWE-281 · Improper Preservation of Permissions
Published
2024-04-30T10:04Z
EPSS history
Timeline
  • 30 APR 10:04Z
    XADMaster may not apply quarantine attribute correctly to extracted files
    cvelistv5