MediumCVSS 4.3
EPSS 1.7%
pax 1:20140703 allows remote attackers to write to arbitrary files via a symlink attack in an archive.
Vendor
pax project vulnerabilities
2 published CVES affecting pax project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
Latest pax project CVEs
Newest publication first
-
-
MediumCVSS 5.0 EPSS 1.6%
Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.