CVE-2024-57966

MEDIUM

KDE ark < 24.12.0 - Absolute Path Traversal via Archive Extraction

Title source: llm

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive.

Core 3

Core References

Mailing List

Various Sources

Patch

CVSS v3 5.0

EPSS 0.0026

EPSS Percentile 17.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-36

Status published

Products (1)

KDE/ark < 24.12.0

Published Feb 03, 2025

Tracked Since Feb 18, 2026