A path traversal vulnerability on Pardus Software Center's "extractArchive" function could allow anyone on the same network to do a man-in-the-middle and write files on the system.
CVSS 3.1MEDIUM 5.9·Network·No auth·No interaction·EPSS 0.00698·Published 2021-09-18·Fixed in 0.1.0~beta10CWE-22