Every CVE Search/ Get API key

CVE-2007-2012

Multiple directory traversal vulnerabilities in MimarSinan CompreXX 4.1 allow remote attackers to...

5.8 Medium

Multiple directory traversal vulnerabilities in MimarSinan CompreXX 4.1 allow remote attackers to create files in arbitrary directories via a .. (dot dot) in a (1) .rar, (2) .jar or (3) .zip archive.

Exploit likelihood

1.35%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.8

Multiple directory traversal vulnerabilities in MimarSinan CompreXX 4.1 allow remote attackers to create files in arbitrary directories via a .. (dot dot) in a (1) .rar, (2) .jar or (3) .zip archive.

Record
CVE-2007-2012
CVSS 2.0
5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Updated
2026-11-02
CVE List No score

Multiple directory traversal vulnerabilities in MimarSinan CompreXX 4.1 allow remote attackers to create files in arbitrary directories via a .. (dot dot) in a (1) .rar, (2) .jar or (3) .zip archive.

Record
CVE-2007-2012
Updated
2026-11-02
EUVDEUVD-2007-2007 No score

Multiple directory traversal vulnerabilities in MimarSinan CompreXX 4.1 allow remote attackers to create files in arbitrary directories via a .. (dot dot) in a (1) .rar, (2) .jar or (3) .zip archive.

Record
EUVD-2007-2007
Updated
2026-11-03
GitHub AdvisoriesGHSA-8q3h-j3f7-xvww No score

Multiple directory traversal vulnerabilities in MimarSinan CompreXX 4.1 allow remote attackers to...

Multiple directory traversal vulnerabilities in MimarSinan CompreXX 4.1 allow remote attackers to create files in arbitrary directories via a .. (dot dot) in a (1) .rar, (2) .jar or (3) .zip archive.

Record
GHSA-8q3h-j3f7-xvww
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
aliases, references, titleGitHub Advisories
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-2012 is a medium vulnerability (CVSS 5.8) in Mimarsinan Comprexx, published April 12, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.35%, the 71st percentile. No source names a fixed version.

References

MoveEnter Open