CVE-2020-14352

CVE-2020-14352 is a directory traversal vulnerability in librepo versions prior to 1.12.1, affecting products like fedoraproject, opensuse, and redhat. An attacker controlling a remote repository could exploit this flaw to write files outside the intended destination, potentially leading to system compromise by overwriting critical system files. This vulnerability carries a high CVSS score of 8.0, indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability, primarily threatening users of untrusted third-party repositories. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.