PT-2026-48598 · Libzypp · Libzypp
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
libzypp versions prior to 17.38.13
Description
An issue exists where
.repo files can contain an optional path that may lead to path traversal attacks. Path traversal is a technique that allows an attacker to access files and directories that are stored outside the web root folder by manipulating variables and parameters.Recommendations
Update to version 17.38.13.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Libzypp