This vulnerability (CWE-22) in Pardus Software Center before version 0.6.4 allows an attacker to perform path traversal by improperly limiting pathname access to restricted directories. This can lead to unauthorized access or modification of files outside the intended directory scope. The CVSS 3.1 base score of 9.6 reflects network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation could allow an attacker to read, modify, or delete files outside the intended directory boundaries, potentially compromising system confidentiality, integrity, and availability. This could lead to unauthorized data access or system disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should exercise caution when interacting with the Pardus Software Center and consider limiting exposure to untrusted inputs that could trigger path traversal.