CVE-2020-11736

—

CVSS 3.1

3.9 low

EPSS

<1%p53

Published

Apr 13, 2020 (Apr 13, 2020)

Modified

Jun 17, 2026

Description

fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location.

Vendors: gnome debian canonical
Products: file-roller, debian linux, ubuntu linux
Weakness: CWE-22, CWE-59
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.