CVE-2020-15141

🗓️ 14 Aug 2020 16:20:19Reported by GitHub_MType

In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk

Reporter	Title	Published	Views	Family All 10
Cvelist	CVE-2020-15141 Path Traversal in openapi-python-client	14 Aug 202016:20	–	cvelist
EUVD	EUVD-2020-0121	7 Oct 202500:30	–	euvd
Github Security Blog	Path Traversal in openapi-python-client	20 Aug 202014:38	–	github
NVD	CVE-2020-15141	14 Aug 202017:15	–	nvd
OSV	GHSA-7WGR-7666-7PWJ Path Traversal in openapi-python-client	20 Aug 202014:38	–	osv
OSV	PYSEC-2020-70	14 Aug 202017:15	–	osv
Prion	Path traversal	14 Aug 202017:15	–	prion
PyPA	PYSEC-2020-70	14 Aug 202017:15	–	pypa
RedhatCVE	CVE-2020-15141	22 May 202515:51	–	redhatcve
Veracode	Directory Traversal	17 Aug 202004:54	–	veracode

NVD

Vulners

Node

openapi-python-client_project openapi-python-clientRange<0.5.3

[
  {
    "product": "openapi-python-client",
    "vendor": "triaxtec",
    "versions": [
      {
        "status": "affected",
        "version": "< 0.5.3"
      }
    ]
  }
]

Source	Link
github	www.github.com/triaxtec/openapi-python-client/security/advisories/GHSA-7wgr-7666-7pwj
github	www.github.com/triaxtec/openapi-python-client/blob/main/CHANGELOG.md
pypi	www.pypi.org/project/openapi-python-client
github	www.github.com/triaxtec/openapi-python-client/commit/3e7dfae5d0b3685abf1ede1bc6c086a116ac4746

21 Nov 2024 05:04Current

4.1Medium risk

Vulners AI Score4.1

CVSS 24

CVSS 3.13 - 4.1

EPSS0.00362

CWE-22