CVE-2023-52138

HIGH
Published Feb 5, 2024 Modified Feb 13, 2025 CWE-25 CWE-22 CWE-59

Description

Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution (RCE) on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by default will follow stored symlinks while extracting and the Archiver will not check the symlink location, which leads to arbitrary file writes to unintended locations. When the victim extracts the archive, the attacker can craft a malicious cpio or ISO archive to achieve RCE on the target system. This vulnerability was fixed in commit 63d5dfa.

CVSS v3.1 Score

8.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N

Weakness Type (CWE)

CWE-25 CWE-25
CWE-22 Path Traversal
CWE-59 CWE-59

Affected Products

Vendor Product
mate-desktop engrampa

References

Frequently Asked Questions

What is CVE-2023-52138? +
Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution (RCE) on the target. While handling CPIO archives, the Engrampa Archive manager follows symlink, cpio by default will follow stored symlinks while extracting and the Archiver will not check the symlink location, which leads to arbitrary file writes to unintended locations. When the victim extracts the archive, the attacker can craft a malicious cpio or ISO archive to achieve RCE on the target system. This vulnerability was fixed in commit 63d5dfa. It has a CVSS v3.1 base score of 8.2 (HIGH).
How severe is CVE-2023-52138? +
CVE-2023-52138 has a CVSS v3.1 score of 8.2 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2023-52138? +
CVE-2023-52138 affects products from mate-desktop, specifically: engrampa. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2023-52138? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-68916 9.1

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.
CVE-2023-52076 8.5

Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary …
CVE-2023-6947 7.7

The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, …
CVE-2023-6919 7.5

Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.This issue affects VGuard: before …
CVE-2024-2442 7.5

Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker …
CVE-2025-0225 4.3

A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is an …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2023-52138 — free, no signup required.

Start Free Scan