← Back to CVE List

CVE-2020-24654

Published: 2020-09-02T17:15Z
Last Modified: 2024-11-21T05:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user's home directory. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt