CVE Catalog
CVE-2023-39137
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.32%
24th percentile - higher than 24% of all known CVEs
Summary
An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing.
Risk Assessment
Spoofing filenames may lead to unauthorized access or modification of data, posing a serious threat to system integrity.
Recommendation
It is recommended to update to the latest version of Archive to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Archive v3.3.7
Original NVD description (English source)
An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS