Exploit for Path Traversal in Python Setuptools

🗓️ 15 Mar 2026 23:03:40Reported by ahmedreda38Type

githubexploit

githubexploit🔗 github.com👁 347 Views

CVE-2025-47273: Path traversal in setuptools package_index enables arbitrary file write via crafted URL.

Reporter	Title	Published	Views	Family All 460
ibm	Security Bulletin: A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1, which affects IBM watsonx.data	1 Sep 202514:47	–	ibm
ibm	Security Bulletin: Astronomer with IBM is vulnerable to path traversal issues due to the setuptools package (CVE-2025-47273)	18 Nov 202519:12	–	ibm
ibm	Security Bulletin: Deserialization of untrusted data, path traversal, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	21 Jul 202516:17	–	ibm
ibm	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion	11 Sep 202518:18	–	ibm
ibm	Security Bulletin: Multiple Security vulnerabilities affecting IBM Knowledge Catalog Premium Cartridge	7 Apr 202620:13	–	ibm
ibm	Security Bulletin: IBM Fusion is vulnerable to Path Traversal due to python's setuptools (CVE-2025-47273)	1 Jul 202521:19	–	ibm
ibm	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in python3-setuptools python3-setuptools-wheel setuptools	29 Oct 202510:49	–	ibm
ibm	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView	6 Jul 202610:21	–	ibm
ibm	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0.2	21 Jun 202513:39	–	ibm
ibm	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in setuptools-70.3.0-py3-none-any.whl	22 Oct 202511:06	–	ibm

15 Mar 2026 23:05Current

6Medium risk

Vulners AI Score6

CVSS 3.18.8

CVSS 48.7

EPSS0.01479

SSVC

path traversal setuptools package index arbitrary file write temporary directory url decoding os path join