Düşük CVSS 3.1
CVE-2026-14966: Bbot: güvenlik açığı
Açıklama (NVD)
BBOT's unarchive module rejects archives containing symlink entries before extraction, but for zip and 7z archives it failed to detect symlinks whose listing carries a DOS-attribute prefix before the unix mode, as produced by legacy versions of p7zip. Such an archive, downloaded and extracted during a scan (for example via filedownload), bypassed the guard and caused an attacker-controlled symlink to be written into the extraction directory. The effect is limited to planting the symlink (its target is not written through), and only hosts using such a legacy p7zip build are affected; current mainline 7-Zip is not.
Özet bilgiler
- Ürün
- Blacklanternsecurity Bbot
- CVSS v3.1
- 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N - EPSS
- %0,38 (yüzdelik 33)
- CWE
- CWE-59
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| blacklanternsecurity-bbot | 2.3.1 | 2.8.6 | — |
| blacklanternsecurity-bbot | 3.0.0.0 | 3.0.0.0 | — |
| blacklanternsecurity-bbot | 3.0.0.647 | 3.0.0.647 | — |
| blacklanternsecurity-bbot | 3.0.0.649 | 3.0.0.649 | — |
| blacklanternsecurity-bbot | 3.0.0.652 | 3.0.0.652 | — |
| blacklanternsecurity-bbot | 3.0.0.654 | 3.0.0.654 | — |
| blacklanternsecurity-bbot | 3.0.0.659 | 3.0.0.659 | — |
| blacklanternsecurity-bbot | 3.0.0.669 | 3.0.0.669 | — |
| blacklanternsecurity-bbot | 3.0.0.671 | 3.0.0.671 | — |
| blacklanternsecurity-bbot | 3.0.0.673 | 3.0.0.673 | — |
| blacklanternsecurity-bbot | 3.0.0.691 | 3.0.0.691 | — |
| blacklanternsecurity-bbot | 3.0.0.765 | 3.0.0.765 | — |
| blacklanternsecurity-bbot | 3.0.0.767 | 3.0.0.767 | — |
| blacklanternsecurity-bbot | 3.0.0.773 | 3.0.0.773 | — |
| blacklanternsecurity-bbot | 3.0.0.782 | 3.0.0.782 | — |
| blacklanternsecurity-bbot | 3.0.0.786 | 3.0.0.786 | — |
| blacklanternsecurity-bbot | 3.0.0.793 | 3.0.0.793 | — |
| blacklanternsecurity-bbot | 3.0.0.795 | 3.0.0.795 | — |
| blacklanternsecurity-bbot | 3.0.0.798 | 3.0.0.798 | — |
| blacklanternsecurity-bbot | 3.0.0.819 | 3.0.0.819 | — |
| blacklanternsecurity-bbot | 3.0.0.821 | 3.0.0.821 | — |
| blacklanternsecurity-bbot | 3.0.0.829 | 3.0.0.829 | — |
| blacklanternsecurity-bbot | 3.0.0.836 | 3.0.0.836 | — |
| blacklanternsecurity-bbot | 3.0.0.849 | 3.0.0.849 | — |
| blacklanternsecurity-bbot | 3.0.0.851 | 3.0.0.851 | — |
| blacklanternsecurity-bbot | 3.0.0.858 | 3.0.0.858 | — |
| blacklanternsecurity-bbot | 3.0.0.870 | 3.0.0.870 | — |
| blacklanternsecurity-bbot | 3.0.0.876 | 3.0.0.876 | — |
| blacklanternsecurity-bbot | 3.0.0.884 | 3.0.0.884 | — |
| blacklanternsecurity-bbot | 3.0.0.897 | 3.0.0.897 | — |