EUVD-2026-63374
GHSA-48r4-r7pv-pj69
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
File must be opened locally by the user (AV:L/UI:R); no system privileges needed (PR:N); arbitrary write achieves full C/I/A on the local system with no scope change.
Primary rating from Vendor (a6d3dc9e-0591-4a13-bce7-0f5b31ff6158).
CVSS VectorVendor: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158
Lifecycle Timeline
4DescriptionCVE.org
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estonian Information System Authority (RIA) DigiDoc4 client.
This issue affects DigiDoc4: from 4.0.0 before 4.11.0.
AnalysisAI
Path traversal in DigiDoc4 (versions 4.0.0 through 4.10.x) enables arbitrary filesystem writes when a user opens a specially crafted ASiC container file. The underlying libdigidocpp library parsed full-path entries in container manifests without validating traversal sequences such as .., allowing embedded files to be extracted outside the intended directory. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the victim to actively open a maliciously crafted ASiC container file (.asice or .asics) using DigiDoc4 - confirmed by the CVSS 4.0 UI:A metric. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N correctly characterises this as a local, user-triggered attack with no special configuration prerequisites. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade DigiDoc4 to version 4.11.0 or later, which incorporates path validation in both the client (PR #1402) and the libdigidocpp library (PR #736). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all systems running DigiDoc4 versions 4.0.0-4.10.x, issue a user advisory prohibiting the opening of ASiC container files from untrusted sources, and document current version distribution. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today