CVE-2023-39135

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Aug 30, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-391365.5An unhandled edge case in the component _sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service (DoS) via a crafteCVE-2023-391377.8An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing.CVE-2023-391387.8An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file.CVE-2023-391397.8An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file.CVE-2023-39145.3A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to CVE-2023-391417.5webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability.CVE-2023-391439.8PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. ThCVE-2023-391447.5Element55 KnowMore appliances version 21 and older was discovered to store passwords in plaintext.CVE-2023-391477.8An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file.CVE-2023-39157.2An issue has been discovered in GitLab EE affecting all versions starting from 16.1 before 16.1.5, all versions starting from 16.2 before 16CVE-2023-391509.8ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code executCVE-2023-391515.4Jenkins 2.415 and earlier, LTS 2.401.2 and earlier does not sanitize or properly encode URLs in build logs when transforming them into hyper
CVE-2023-39135: High severity, CVSS 7.8 | Vulnix