Vulnerability Details : CVE-2019-14452
Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.
Vulnerability category: Directory traversal
Products affected by CVE-2019-14452
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*
- cpe:2.3:a:flightcrew_project:flightcrew:*:*:*:*:*:sigil:*:*
- cpe:2.3:a:sigil-ebook:sigil:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-14452
0.47%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 76 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-14452
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
10.0
|
2.9
|
NIST | |
7.5
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2019-14452
-
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-14452
-
https://github.com/Sigil-Ebook/Sigil/commit/04e2f280cc4a0766bedcc7b9eb56449ceecc2ad4
further harden against malicious epubs and produce error message · Sigil-Ebook/Sigil@04e2f28 · GitHubPatch;Third Party Advisory
-
https://github.com/Sigil-Ebook/flightcrew/issues/52#issuecomment-505997355
Zip Slip Vulnerability in FlightCrew · Issue #52 · Sigil-Ebook/flightcrew · GitHubThird Party Advisory
-
https://usn.ubuntu.com/4085-1/
USN-4085-1: Sigil vulnerability | Ubuntu security noticesThird Party Advisory
-
https://github.com/Sigil-Ebook/Sigil/releases/tag/0.9.16
Release Sigil-0.9.16 · Sigil-Ebook/Sigil · GitHubRelease Notes;Third Party Advisory
-
https://salvatoresecurity.com/zip-slip-in-sigil-cve-2019-14452/
Zip Slip in Sigil (CVE-2019-14452) – Mike Salvatore's Blog
-
https://github.com/Sigil-Ebook/Sigil/commit/0979ba8d10c96ebca330715bfd4494ea0e019a8f
harden plugin unzipping to zip-slip attacks · Sigil-Ebook/Sigil@0979ba8 · GitHubPatch;Third Party Advisory
-
https://github.com/Sigil-Ebook/Sigil/compare/ea7f27d...5b867e5
Comparing ea7f27d...5b867e5 · Sigil-Ebook/Sigil · GitHubThird Party Advisory
-
https://github.com/Sigil-Ebook/Sigil/commit/369eebe936e4a8c83cc54662a3412ce8bef189e4
do not allow zip files to have upward relative path sections · Sigil-Ebook/Sigil@369eebe · GitHubPatch;Third Party Advisory
-
https://github.com/Sigil-Ebook/flightcrew/issues/52#issuecomment-505967936
Zip Slip Vulnerability in FlightCrew · Issue #52 · Sigil-Ebook/flightcrew · GitHubThird Party Advisory
Jump to