CVE-2023-6891

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-6891

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-6891.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-6891

Published

2023-12-17T03:31:03.908Z

Modified

2026-07-15T01:48:57.613102704Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator

Summary

PeaZip Library dragdropfilesdll.dll uncontrolled search path

Details

A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. An attack has to be approached locally. Upgrading to version 9.6.0 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-248251. NOTE: Vendor was contacted early, confirmed the existence of the flaw and immediately worked on a patched release.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/6xxx/CVE-2023-6891.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "9.4.0"
                },
                {
                    "last_affected": "9.4.0"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-427"
    ]
}

References

Affected packages

Git / github.com/peazip/peazip

Affected ranges

Type

GIT

Repo

https://github.com/peazip/peazip

Events

Introduced

933c1e5b318f5a4c7a93ea80f5bcbd99da5004a3

Last affected

933c1e5b318f5a4c7a93ea80f5bcbd99da5004a3

Database specific

{
    "cpe": "cpe:2.3:a:peazip:peazip:9.4.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "9.4.0"
        },
        {
            "last_affected": "9.4.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

9.*

9.4.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-6891.json"