| शीर्षक | Linux Mint Xreader 4.6.3 Path Traversal |
|---|
| विवरण | A path traversal vulnerability in Linux Mint Xreader 4.6.3 allows an attacker to read arbitrary local files accessible to the user running Xreader. Crafted EPUB files can contain directory traversal sequences in OPF manifest or navigation href values. These paths are concatenated with the document directory without sufficient validation, allowing the resulting path to escape the EPUB extraction directory. Exploitation requires the victim to open a crafted EPUB file.
|
|---|
| स्रोत | ⚠️ https://github.com/linuxmint/xreader/issues/713 |
|---|
| उपयोगकर्ता | rodtvs (UID 94532) |
|---|
| सबमिशन | 08/09/2026 02:45 PM (25 दिन पहले) |
|---|
| संयम | 02/10/2026 08:33 PM (24 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 413198 [Linux Mint Xreader तक 4.6.5 EPUB File epub-document.c setup_document_content_list/g_strdup_printf निर्देशिका ट्रैवर्सल] |
|---|
| अंक | 20 |
|---|