Vulnetix
Try Vulnetix Request Demo
BIT-python-2007-4559 PUBLISHED CVSS 9.800000190734863 CRITICAL

Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.

Risk Scores

CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Bitnamipython0, 3.7.0, 3.9.0

Timeline

References

Open in Interactive Console →