CVE-2023-39139

HighCVSS 7.8

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

26th percentile - higher than 26% of all known CVEs

Version 3.3.7 of Archive contains a vulnerability that allows attackers to perform a path traversal attack by extracting a crafted zip file.

This vulnerability could lead to unauthorized access to the file system, posing a serious threat to the organization's data security.

It is recommended to update to the latest version of Archive to mitigate this vulnerability and to monitor systems for unauthorized access.

Original NVD description (English source)

An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS