CVE-2023-52076 is a path traversal and arbitrary file write vulnerability affecting Atril Document Viewer versions prior to 1.26.2, the default document reader for the MATE desktop environment. This vulnerability allows an attacker to write arbitrary files to any location on the filesystem accessible by the user, potentially leading to Remote Command Execution, although it cannot overwrite existing files. With a CVSS score of 7.8 (High), it requires user interaction (opening a crafted document) and has high impacts on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.26.2CPE matchmatch criteria | cpe:2.3:a:mate-desktop:atril:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.