CVE-2017-5982: Kodi

High severity, CVSS 7.5. EPSS: 78% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Chorus2 2.4.2 add-on for Kodi allows remote attackers to read arbitrary files via a %2E%2E%252e (encoded dot dot slash) in the image path, as demonstrated by image/image%3A%2F%2F%2e%2e%252fetc%252fpasswd.

Affected products

• Kodi Kodi: version 17.1 only

Published 2017-02-28. Last modified 2026-06-17.