{"id":"CVE-2015-1193","title":"Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or","published":"2015-01-21T14:59:54.577Z","updated":"2026-06-16T20:21:55.723Z","severity":"medium","cvssScore":5,"epss":0.01552,"epssPct":0.7547,"kev":false,"maturity":"none","actionScore":20,"primaryVendor":"pax project","primaryProduct":"pax","cweId":"CWE-22","fixAvailable":true,"tags":["pre-auth","path-traversal","remote"],"epssDelta7":0,"summary":"Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.","cvssVector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","cvssVersion":"2.0","cvssSource":"nvd-primary","cweName":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","kevAdded":null,"kevDue":null,"kevRansomware":null,"source":"nvd","cna":"mitre","ssvc":null,"sources":{"cna":"2024-08-06T04:33:20.607Z","osv":"2026-11-13T03:18:18.039Z","epss":"2026-11-12","cna_seen":"2026-09-29T10:48:07.828Z"},"cvssCna":null,"hasPatchRef":false,"credits":[],"counts":{"exploitdb":0,"metasploit":0,"nuclei":0,"githubPoc":0},"products":[{"vendor":"pax project","product":"pax","cpe":"cpe:2.3:a:pax_project:pax"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2015/01/18/3","tags":null}],"exploits":[],"analysis":null,"affectedVersions":[{"vendor":"pax project","product":"pax","version":"1:20140703","vsi":null,"vse":null,"vei":null,"vee":null}],"source_attribution":"NVD (NIST), CVE Program, CISA KEV, FIRST EPSS, OSV. Aggregated by Noroxi."}