CVE-2020-10870

CVE-2020-10870 describes a denial-of-service vulnerability in Zim versions through 0.72.1, where predictable temporary directory names allow a local attacker to preemptively create these directories, preventing legitimate users from launching the application. Rated Medium severity (CVSS 5.5), this low-complexity attack requires local access and user privileges, leading to high availability impact but no confidentiality or integrity compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.