What is CVE-2024-22405?

CVE-2024-22405 is a medium-severity vulnerability in Macpaw Xadmaster, classified under Improper Preservation of Permissions. CVSS score: 5.5/10. Published 2024-04-30.

How severe is CVE-2024-22405?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Macpaw Xadmaster

CVE-2024-22405

XADMaster is an objective-C library for archive and file unarchiving and extraction. When extracting a specially crafted zip archive XADMaster may not apply quarantine attribute correctly. Such behaviour may circumvent Gatekeeper checks on the system. Only macOS installations are affected. This issue was fixed in XADMaster 1.10.8. It is recommended to upgrade to the latest version. There are no known workarounds for this issue.

EPSS: 0.002 (9.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.

Affected products

Macpaw Xadmaster — versions < 1.10.8

Weakness classification (CWE)

CWE-281 — Improper Preservation of Permissions

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2024-22405?: CVE-2024-22405 is a medium-severity vulnerability in Macpaw Xadmaster, classified under Improper Preservation of Permissions. CVSS score: 5.5/10. Published 2024-04-30.
How severe is CVE-2024-22405?: Medium severity. CVSS v3 base score is 5.5 out of 10.