High severity7.8NVD Advisory· Published Jul 4, 2019· Updated Jun 17, 2026

CVE-2019-13241

Description

FlightCrew v0.9.2 and older are vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FlightCrew/FlightCrewdescription
Sigil Ebook/flightcrewllm-create
Range: <=0.9.2

Patches

Vulnerability mechanics

References

github.com/Sigil-Ebook/flightcrew/issues/52nvdExploitThird Party Advisory
salvatoresecurity.com/fun-with-fuzzers-how-i-discovered-three-vulnerabilities-part-3-of-3/nvdExploitThird Party Advisory
usn.ubuntu.com/4055-1/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000