CVE-2023-0592

MEDIUM 5.5CVE-2023-0592 · Published 31/01/2023 · updated 17/06/2026

In short

CVE-2023-0592 is a MEDIUM (CVSS 5.5) vulnerability affecting jefferson (jefferson project).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 30.1% of all vulnerabilities.
Fix: update to 0.4.1 or later.

Package	Affected versions	Patched versions
jefferson jefferson_project	`< 0.4.1`	`0.4.1`

Description

A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1.

References

sviehb/jefferson commit 971aca1 · Patch
onekey.com/blog/security-advisory-remote-command-execution-in-binwalk · Exploit

More vulnerabilities in jefferson

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free