CyberRota Analysis
AI-GeneratedA path traversal vulnerability in the apport-unpack utility on Linux allows attackers to manipulate crash report files, potentially leading to the creation or overwriting of arbitrary files with the privileges of the executing user. This could enable unauthorized access or modification of sensitive data. System administrators and users running affected versions of Canonical Apport should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in crash report files.