Vulnerabilities

TI-2019-10774 CVE-2019-14452 · GHSA-4h5v-f3pf-4x55

Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write…

LOW 39

Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03694 Published 2019-07-31 No fix listed CWE-22

TI-2019-09925 CVE-2019-13241 · GHSA-jff3-mqp2-2qvx

FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers…

LOW 37

FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0163 Published 2019-07-04 No fix listed CWE-22

TI-2019-09765 CVE-2019-13032 · GHSA-qg8h-9c83-r4h2

An issue was discovered in FlightCrew v0.9.2 and earlier.

LOW 27

An issue was discovered in FlightCrew v0.9.2 and earlier.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.0101 Published 2019-06-28 No fix listed CWE-476

Vulnerabilities

Filters

Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write…

FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers…

An issue was discovered in FlightCrew v0.9.2 and earlier.