CVE-2017-5982

Name: CVE-2017-5982
Creator: NVD / NIST
Published: 2017-02-28T18:59:00.5+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 77.63%

Last modified Jun 17, 2026

CVE-2017-5982 is a vulnerability of currently unknown severity. Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd.. EPSS estimates a 77.63% chance of exploitation in the next 30 days.

Description

Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd.

Metrics

EPSS Probability

77.63%

99.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-22

Affected Software

Vendor	Product	Versions
Kodi	Kodi	17.1

References

http://packetstormsecurity.com/files/141043/Kodi-17.1-Arbitrary-File-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2017/Feb/27Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/96481
https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
https://www.exploit-db.com/exploits/41312/Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/141043/Kodi-17.1-Arbitrary-File-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2017/Feb/27Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/96481
https://lists.debian.org/debian-lts-announce/2024/01/msg00009.html
https://www.exploit-db.com/exploits/41312/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Feb 28, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-5982?

How severe is CVE-2017-5982?

Severity scoring for CVE-2017-5982 is pending analysis. The EPSS model estimates a 77.63% probability of exploitation in the next 30 days.

How do I fix CVE-2017-5982?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-5982?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST