Archive Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Archive Project records in CISA KEV

No Archive Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Archive · all components

TI-2023-20312 CVE-2023-39139 · GHSA-9v85-q87q-g4vg

HIGH 69

An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00368 Published 2023-08-30 Fixed in 3.3.8 CWE-22

TI-2023-20310 CVE-2023-39137 · GHSA-r285-q736-9v95

HIGH 69

An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00346 Published 2023-08-30 Fixed in 3.3.8 CWE-20