PatchSiren

Kodi CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Kodi CVE published 2017-02-28

CVE-2017-5982

CVE-2017-5982 is a high-severity directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi. A remote attacker can use a crafted encoded image path to escape the intended directory and read arbitrary local files, including sensitive system files. NVD classifies the issue as CWE-22 and assigns CVSS 3.0 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).