CVE-2024-33870

2024-07-0300:00:00

mitre

www.cve.org

artifex ghostscript

path traversal

arbitrary files

0.0004 Low

EPSS

Percentile

9.1%

JSON

An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal (via a crafted PostScript document) to arbitrary files if the current directory is in the permitted paths. For example, there can be a transformation of …/…/foo to ./…/…/foo and this will grant access if ./ is permitted.