CVE-2020-9782 — Path Traversal in Apple Macos

CWE-22 — Path Traversal5 documents5 sources
Severity
7.5HIGHNVD
OSV5.5
EPSS
0.5%
top 34.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Apple MacosApple MAC OS XJasper Project Jasper
Timeline
PublishedOct 27
Latest updateMay 24

Description

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Catalina 10.15.2, Security Update 2019-002 Mojave, and Security Update 2019-007 High Sierra. A remote attacker may be able to overwrite existing files.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5apple/macosunspecified — 10.15
▶NVDapple/mac_os_x< 10.15.2
▶Ubuntujasper_project/jasper< 1.900.1-debian1-2.4ubuntu1.3

🔴Vulnerability Details

3
GHSA
GHSA-6p83-9xwf-m98p: A parsing issue in the handling of directory paths was addressed with improved path validation↗2022-05-24
▶
OSV
jasper vulnerabilities↗2021-01-11
▶
CVEList
CVE-2020-9782: A parsing issue in the handling of directory paths was addressed with improved path validation↗2020-10-27
▶

📋Vendor Advisories

1
Apple
CVE-2020-9782: macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra↗2019-12-10
▶
CVE-2020-9782 — Path Traversal in Apple Macos | cvebase