Lucene search

K
osvGoogleOSV:GHSA-MR7P-25V2-35WR
HistoryAug 23, 2019 - 9:53 p.m.

NLTK Vulnerable To Path Traversal

2019-08-2321:53:51
Google
osv.dev
6

0.006 Low

EPSS

Percentile

78.9%

NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.

Rows per page:
1-10 of 451