Ubi Reader Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Ubi Reader Project records in CISA KEV

No Ubi Reader Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ubi Reader 2 records MEDIUM

Records

2 records in Ubi Reader · all components

TI-2023-00560 CVE-2023-0591 · GHSA-vp2x-3mc3-3cj4

Path Traversal in ubi_reader

MEDIUM 58

ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the process has write acce…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.0039 Published 2023-01-31 Fixed in 0.8.5 CWE-22

TI-2022-04176 CVE-2022-4572 · GHSA-hc37-84v3-8gmq

UBI Reader UBIFS File output.py ubireader_extract_files path traversal

LOW 32

A vulnerability, which was classified as problematic, has been found in UBI Reader up to 0.8.0.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00583 Published 2022-12-17 Fixed in 0.8.5 CWE-22

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0