description: Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.
problem types: Allows arbitrary file write on disk
affected:
{
product: Kodi (XBMC)
vendor: XBMC Foundation
versions:
status: affected, version: <= v17.1
}