GHSA-H4M5-QPFP-3MPV Directory Traversal in Babel

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

[SECURITY] [DLA 2790-1] python-babel security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2790-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler October 21, 2021 https://wiki.debian.org/LTS -...

Directory Traversal

babel is vulnerable to directory traversal. The library does not clean the locale identifiers properly before loading from file, allowing a malicious user to load arbitrary locale .dat files...

DLA-2790-1 python-babel - security update

Bulletin has no description...

ALPINE-CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

AZL-6325 CVE-2021-42771 affecting package babel for versions less than 2.9.1-1

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

PYSEC-2021-421

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

UBUNTU-CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

PYSEC-2021-421

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

CVE-2021-42771

CVE-2021-42771 affects Babel.Locale in the Babel project; versions prior to 2.9.1 are vulnerable. The issue arises from directory traversal that allows loading arbitrary locale .dat files containing serialized Python objects, enabling code execution. Public advisories (e.g., Debian LTS, AlmaLinux...

CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...

Babel 路径遍历漏洞

Babel is a multilingual support module used in content management systems. A security vulnerability exists in Babel due to a network system or product not properly filtering special characters, commands, etc. from external input data during the construction of executable operating system commands...

Huawei EulerOS: Security Advisory for babel (EulerOS-SA-2021-2353)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : babel (EulerOS-SA-2021-2353)

According to the version of the babel packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Relative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk and execute arbitrary code.CVE-2021-20095 Note that...

EulerOS 2.0 SP5 : babel (EulerOS-SA-2021-2319)

According to the version of the babel packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel,...

Huawei EulerOS: Security Advisory for babel (EulerOS-SA-2021-2319)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

babel-bahr.blog4ever.com Cross Site Scripting vulnerability OBB-2127506

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...