What’s Vulnerable › Vulnerabilities

CVE-2017-5982

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 78.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-02-28 · updated 2026-06-17
• Weakness: CWE-22

Description

Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd.

Affected products

• Kodi: 17.1

References

• http://packetstormsecurity.com/files/141043/Kodi-17.1-Arbitrary-File-Disclosure.html
• http://seclists.org/fulldisclosure/2017/Feb/27
• http://www.securityfocus.com/bid/96481
• https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
• https://www.exploit-db.com/exploits/41312/
• http://packetstormsecurity.com/files/141043/Kodi-17.1-Arbitrary-File-Disclosure.html
• http://seclists.org/fulldisclosure/2017/Feb/27
• http://www.securityfocus.com/bid/96481
• https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
• https://www.exploit-db.com/exploits/41312/

Get alerted when CVE-2017-5982 or the next vulnerability affects your stack