{"action":"Upgrade kodi to 2:18.6+dfsg1-1 or later.","affected":[{"fixed":"2:18.6+dfsg1-1","introduced":"0"}],"component":"kodi","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["2:18.6+dfsg1-1"],"id":"tcs_01M5NCGEW0KGC5VQW66GVXCT1R","modified_at":"2026-09-01T20:03:48.815809168Z","published_at":"2017-02-28T18:59:00.500Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2017-5982","https://security-tracker.debian.org/tracker/CVE-2017-5982"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2017-5982#Debian:13/kodi","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2017-5982"}],"summary":"Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by i"}