CVE-2023-39137

HIGH

Archive <3.3.7 - Info Disclosure

Title source: llm

Description

An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing.

References (4)

Scores

CVSS v3 7.8
EPSS 0.0004
EPSS Percentile 12.8%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Classification

CWE
CWE-20
Status published

Affected Products (2)

archive_project/archive
Pub/archive < 3.3.8Pub

Timeline

Published Aug 30, 2023
Tracked Since Feb 18, 2026