PoC Index

CVE-2023-0592

MEDIUM 5.5EPSS 0.4%

A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1.

CVSS v3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS v3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
EPSS
0.36% chance of exploitation in the next 30 days, 29th percentile
Published
2023-01-31
Updated
2025-03-27

Proof-of-concept exploits (1)

References

Related