Directory Traversal Vulnerability in GNOME File-Roller

CVE-2020-36314

What is CVE-2020-36314?

A directory traversal vulnerability has been identified in GNOME File-Roller prior to version 3.38.0, which could allow attackers to exploit the process of extracting files. This security flaw arises from inadequate validation when handling files whose parent directories are symbolic links, potentially allowing unauthorized access to the filesystem. This issue stems from an incomplete fix for a previous security concern and highlights the importance of comprehensive implementations in handling file extraction safely. Users are encouraged to update to the latest version to mitigate this risk.

References