CVE-2023-39136

MediumCVSS 5.5

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

In version 2.5.4 of the ZipArchive component, an unhandled edge case allows attackers to trigger a Denial of Service (DoS) attack via a crafted zip file.

Risk Assessment

A DoS attack can lead to service unavailability, impacting the organization's operational continuity and potentially causing financial losses.

Recommendation

It is recommended to update the ZipArchive component to the latest version to mitigate this vulnerability and to monitor systems for potential attacks.

Original NVD description (English source)

An unhandled edge case in the component _sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service (DoS) via a crafted zip file.