Lucene search
GoogleOSV:GHSA-8WWF-2644-F8X4HistoryJun 15, 2021 - 3:49 p.m.
The Fuck Arbitrary File Deletion via Path Traversal
2021-06-1515:49:01
Google
osv.dev
8
The thefuck (aka The Fuck) is app that corrects errors in previous console commands. The Fuck python package before 3.31 allows Path Traversal that leads to arbitrary file deletion via the undo archive operation feature.
References
github.com/nvbn/thefuck
github.com/nvbn/thefuck/commit/e343c577cd7da4d304b837d4a07ab4df1e023092
github.com/nvbn/thefuck/releases/tag/3.31
lists.fedoraproject.org/archives/list/[email protected]/message/4MEDDLBFVRUQHPYIBJ4MFM3M4NUJUXL5
lists.fedoraproject.org/archives/list/[email protected]/message/YA6UNQSOY6M3NJDZLS6YJXTS4WGDMEEJ
nvd.nist.gov/vuln/detail/CVE-2021-34363
vuln.ryotak.me/advisories/48
Related
openvas
openvas
Fedora: Security Advisory for thefuck (FEDORA-2022-0f1653e269)
2022-01-20 00:00:00
Fedora: Security Advisory for thefuck (FEDORA-2022-5aeda24c24)
2022-01-19 00:00:00
cve
cve
CVE-2021-34363
2021-06-10 11:15:09
archlinux
archlinux
[ASA-202106-39] thefuck: arbitrary file overwrite
2021-06-15 00:00:00
ubuntucve
ubuntucve
CVE-2021-34363
2021-06-10 00:00:00
prion
prion
Path traversal
2021-06-10 11:15:00
fedora
fedora
[SECURITY] Fedora 35 Update: thefuck-3.32-1.fc35
2022-01-19 02:12:42
[SECURITY] Fedora 34 Update: thefuck-3.32-1.fc34
2022-01-19 01:54:38
cvelist
cvelist
CVE-2021-34363
2021-06-10 10:07:03
osv
osv
PYSEC-2021-97
2021-06-10 11:15:00
CVE-2021-34363
2021-06-10 11:15:09
nvd
nvd
CVE-2021-34363
2021-06-10 11:15:09
debiancve
debiancve
CVE-2021-34363
2021-06-10 11:15:09
github
github
The Fuck Arbitrary File Deletion via Path Traversal
2021-06-15 15:49:01
veracode
veracode
Path Traversal
2021-06-11 08:50:26