GitHub
Releases416
Frequency3 weeks 3 days
Last Release
Stars142
File archiver by KDE
CVE History
| CVE | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|
| 3.3 LOW | 4.3 MEDIUM | ||
In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user's home directory. | |||
| 3.3 LOW | 4.3 MEDIUM | ||
In kerfuffle/jobs.cpp in KDE Ark before 20.08.0, a crafted archive can install files outside the extraction directory via ../ directory traversal. | |||