VDB
BDU%3A2024-07075
BDU%3A2024-07075
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции nltk.download() пакета библиотек для символьной и статистической обработки естественного языка NLTK, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| NLTK Project | NLTK |
Timeline
- Sep 16, 2024 CVE Published
References
- https://github.com/nltk/nltk/issues/2522 url
- https://github.com/nltk/nltk/issues/3266 url
- https://www.vicarius.io/vsociety/posts/rce-in-python-nltk-cve-2024-39705-39706 url
- https://github.com/advisories/GHSA-cgvx-9447-vcch url
- https://www.nltk.org/news.html url
- https://github.com/nltk/nltk/pull/3290 advisory
- https://github.com/delftdata/valentine/pull/75 advisory