Medium severity5.5NVD Advisory· Published Sep 6, 2018· Updated Jun 17, 2026

CVE-2018-1000801

Description

okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user workstation. This attack appear to be exploitable via he victim must open a specially crafted Okular archive. This issue appears to have been corrected in version 18.08.1

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

KDE/Okularllm-fuzzy
Range: <18.08.1
osv-coords
pkg:rpm/opensuse/okular&distro=openSUSE%20Tumbleweed
Range: < 21.08.1-1.2

Patches

Vulnerability mechanics

References

cgit.kde.org/okular.git/commit/nvdPatchThird Party Advisory
bugs.kde.org/show_bug.cginvdExploitIssue TrackingPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2018/09/msg00027.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/201811-08nvdThird Party Advisory
www.debian.org/security/2018/dsa-4303nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000