CVE-2018-1000801
okular: Directory traversal in function unpackDocumentArchive() in core/document.cpp
Severity
ModerateRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · September 6, 2018
Updated · November 22, 2025
Description
A path traversal vulnerability has been discovered in Okular, in the way it creates temporary files when reading an Okular archive. Paths are read from content.xml and they are not properly sanitized before being used as template file names for the temporary files created when extracting the Okular archive, thus allowing a local attacker to write files outside the target temporary directory.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Check Okular archives with unzip -l <archive-name>.okular before opening them. Do not open them with Okular if they contain files with "../".
CVSS / CWE
CVSS 3.0 · 5.5CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')