Lucene search

2647838E-42C9-5000-A35B-F2C33E486960

HistoryJan 21, 2023 - 2:52 p.m.

Exploit for Path Traversal in Py7Zr Project Py7Zr

2023-01-2114:52:59

101

py7zr

path traversal

exploit

vulnerable

arbitrary file

webapp

cve-2022-44900

sevenzipfile.extractall()

python library

malicious 7z file

symlink

arbitrary file write

arbitrary file read

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.01

Percentile

84.0%

JSON

CVE-2022-44900 Demo lab

Demo webapp vulnerable to [CVE-2022-44…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.01

Percentile

84.0%

JSON

Related for 2647838E-42C9-5000-A35B-F2C33E486960