Directory Traversal Vulnerability in GNOME Autoar Affecting Shell and Nautilus

CVE-2020-36241

What is CVE-2020-36241?

The gnome-autoar tool, utilized in various GNOME applications including GNOME Shell and Nautilus, is susceptible to a Directory Traversal vulnerability. This flaw permits unauthorized extraction of files outside the intended directory due to insufficient validation of symlink parent directories. An attacker could potentially exploit this weakness during the extraction process, leading to the leakage of sensitive data or modification of files on the host system.

References