CVE-2020-9359
Published Mar 24, 2020KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
Vendor/product archive
2 CVEs tagged to kde / okular — 0 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.
KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file cre…