CVE-2024-33870

2024-07-0319:15:03

[email protected]

web.nvd.nist.gov

artifex ghostscript

path traversal

postscript document

0.0004 Low

EPSS

Percentile

9.1%

JSON

An issue was discovered in Artifex Ghostscript before 10.03.1. There is path traversal (via a crafted PostScript document) to arbitrary files if the current directory is in the permitted paths. For example, there can be a transformation of …/…/foo to ./…/…/foo and this will grant access if ./ is permitted.