[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkMNgO-V7Psk__grZxX65FFkDIU0qxaJIkOLfigh9SGY":3,"g5a-risk:CVE-2020-24654":213},{"success":4,"data":5,"meta":211},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":84,"references":85,"referencesCount":132,"weaknesses":133,"weaknessesCount":142,"isActivelyExploited":143,"cisaInfo":26,"otxData":26,"relatedBlogPosts":144,"seoMetadata":145,"configurations":170,"relatedVendorCves":209,"notableEvents":210},"CVE-2020-24654","What is CVE-2020-24654?","In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a user's home directory.","In KDE Ark before 20.08.1, a crafted TAR archive with symlinks can install files outside the extraction directory, as demonstrated by a write operation to a ...","2020-09-02T17:15:12.327","2023-11-07T03:20:09.41",3.3,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED",null,1.8,1.4,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":35,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":4},{"Version":32,"VectorString":33,"AccessVector":34,"AccessComplexity":35,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":36,"AvailabilityImpact":23,"BaseScore":37,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","NETWORK","MEDIUM","PARTIAL",4.3,8.6,2.9,0.01496,[40,40,40,40,40,40,40],"Low",[44,49,54,57,60,65,70,75,78,81],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"kde","ark","*","cpe:2.3:a:kde:ark:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"canonical","ubuntu_linux","16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":50,"product":51,"version":55,"criteria":56,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":50,"product":51,"version":58,"criteria":59,"vulnerable":4},"20.04","cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",{"vendor":61,"product":62,"version":63,"criteria":64,"vulnerable":4},"debian","debian_linux","10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":66,"product":67,"version":68,"criteria":69,"vulnerable":4},"fedoraproject","fedora","32","cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",{"vendor":71,"product":72,"version":73,"criteria":74,"vulnerable":4},"opensuse","leap","15.1","cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*",{"vendor":71,"product":72,"version":76,"criteria":77,"vulnerable":4},"15.2","cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",{"vendor":61,"product":62,"version":79,"criteria":80,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":66,"product":67,"version":82,"criteria":83,"vulnerable":4},"33","cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",10,[86,92,97,102,107,111,115,118,122,125,129],{"url":87,"source":88,"tags":89},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-09\u002Fmsg00001.html","Opensuse",[90,91],"Mailing List","Third Party Advisory",{"url":93,"source":94,"tags":95},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1175857","Suse",[96,91],"Issue Tracking",{"url":98,"source":99,"tags":100},"https:\u002F\u002Fgithub.com\u002FKDE\u002Fark\u002Fcommit\u002F8bf8c5ef07b0ac5e914d752681e470dea403a5bd","GitHub",[101,91],"Patch",{"url":103,"source":104,"tags":105},"https:\u002F\u002Fkde.org\u002Finfo\u002Fsecurity\u002Fadvisory-20200827-1.txt","Kde",[106],"Vendor Advisory",{"url":108,"source":109,"tags":110},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F05\u002Fmsg00026.html","Debian",[90,91],{"url":112,"source":113,"tags":114},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FLXMMXNJDYOCJRZTESIUGHG6CS4RJKECX\u002F","Fedoraproject",[],{"url":116,"source":113,"tags":117},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FYJOZ6YRNPZX5MJGVBMOCOA7N6Z4EU2OK\u002F",[],{"url":119,"source":120,"tags":121},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202010-06","Gentoo",[91],{"url":123,"source":120,"tags":124},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202101-06",[91],{"url":126,"source":127,"tags":128},"https:\u002F\u002Fusn.ubuntu.com\u002F4482-1\u002F","Ubuntu",[91],{"url":130,"source":109,"tags":131},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2020\u002Fdsa-4759",[91],11,[134],{"id":135,"name":136,"description":137,"extendedDescription":138,"status":139,"abstraction":140,"structure":141},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",1,false,[],{"title":146,"metaDescription":147,"keywords":148,"canonicalUrl":149,"structuredData":150},"What is CVE-2020-24654? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-24654, a low severity cyber security vulnerability from 2020. In KDE Ark before 20.08.1, a crafted TAR archive with symlin...","CVE-2020-24654, CVE-2020-24654 vulnerability, CVE-2020-24654 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, kde security, canonical security, debian security, fedoraproject security, opensuse security, ark vulnerability, ubuntu_linux vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2020-24654",{"@context":151,"@type":152,"headline":146,"description":147,"datePublished":10,"dateModified":11,"author":153,"publisher":157,"about":161,"mainEntityOfPage":165,"articleSection":168,"keywords":169},"https:\u002F\u002Fschema.org","TechArticle",{"@type":154,"name":155,"url":156},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":154,"name":155,"url":156,"logo":158},{"@type":159,"url":160},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":162,"name":6,"description":163,"additionalType":164},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":166,"@id":167},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-24654","Cybersecurity","CVE-2020-24654, CVE-2020-24654 vulnerability, CVE-2020-24654 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[171,179,197,203],{"Operator":26,"Negate":26,"Nodes":172},[173],{"Operator":174,"Negate":26,"CPEMatch":175},"OR",[176],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":177,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":178,"VersionEndIncluding":26},"785B922D-7B29-4839-9E69-208ABD25BB69","20.08.1",{"Operator":26,"Negate":26,"Nodes":180},[181],{"Operator":174,"Negate":26,"CPEMatch":182},[183,185,187,189,191,193,195],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":184,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":186,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":188,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"902B8056-9E37-443B-8905-8AA93E2447FB",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":190,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":192,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"36D96259-24BD-44E2-96D9-78CE1D41F956",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":194,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B620311B-34A3-48A6-82DF-6F078D7A4493",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":196,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B009C22E-30A4-4288-BCF6-C3E81DEAF45A",{"Operator":26,"Negate":26,"Nodes":198},[199],{"Operator":174,"Negate":26,"CPEMatch":200},[201],{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":202,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":26,"Negate":26,"Nodes":204},[205],{"Operator":174,"Negate":26,"CPEMatch":206},[207],{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":208,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E460AA51-FCDA-46B9-AE97-E6676AA5E194",[],[],{"lastModified":11,"cacheTime":212,"version":32},1792254101750,{"score":214,"band":215,"action":216,"scoredAt":217},12,"Info","Track","2026-10-16T06:49:18.443716+00:00"]