CVE-2023-52138

Summary

CVE-2023-52138 is a Path Traversal vulnerability affecting Engrampa, an archive manager for the MATE environment. This issue allows an attacker to achieve Remote Command Execution (RCE) on a target system by crafting a malicious CPIO or ISO archive. Engrampa follows symlinks during the extraction process, and cpio, which is used by Engrampa, will follow stored symlinks without checking their locations. As a result, arbitrary file writes can occur to unintended locations, potentially leading to RCE. The vulnerability was addressed in commit 63d5dfa.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.