Path Traversal Vulnerability in NSA Ghidra by National Security Agency
CVE-2019-13623

7.8HIGH

Key Information:

Vendor: Nsa
Status: Ghidra
Vendor: CVE Published:; 17 July 2019

What is CVE-2019-13623?

In NSA Ghidra versions prior to 9.1, a path traversal vulnerability exists in RestoreTask.java, allowing attackers to exploit an archive containing an executable file with a filename that starts with '../'. This flaw can lead to the overwriting of arbitrary files, which may include critical modules of the Ghidra framework, potentially enabling arbitrary code execution. This scenario arises particularly when analysis results are shared among users.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch