CVE-2023-6891

ÉLEVÉE 7.8CVE-2023-6891 · Published 17/12/2023 · updated 17/06/2026

En bref

CVE-2023-6891 est une vulnérabilité ÉLEVÉE (CVSS 7.8) touchant peazip (peazip).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.30%, plus élevée que 23.1% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
peazip peazip	`= 9.4.0`	No fix yet

Description

A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. An attack has to be approached locally. Upgrading to version 9.6.0 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-248251. NOTE: Vendor was contacted early, confirmed the existence of the flaw and immediately worked on a patched release.

References

peazip.github.io/changelog.html · Release Notes
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Autres vulnérabilités de peazip

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free