Sigil-Ebook Sigil vulnerabilities

1 known vulnerability affecting sigil-ebook/sigil.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2019-14452HIGHCVSS 7.5fixed in 0.9.162019-07-31

CVE-2019-14452 [HIGH] CWE-22 CVE-2019-14452: Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary fi Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.