Lucene search
+L

2953 matches found

osv_ubuntu
osv_ubuntu
•added 2025/05/17 4:15 p.m.•11 views

UBUNTU-CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS7.3AI score0.01592EPSS
SaveExploits5References8
UbuntuCve
UbuntuCve
•added 2025/05/17 4:15 p.m.•22 views

CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS7.3AI score0.01592EPSS
SaveExploits5References7
Cvelist
Cvelist
•added 2025/05/17 3:46 p.m.•85 views

CVE-2025-47273 setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.7CVSS0.01592EPSS
SaveExploits5References4
CVE
CVE
•added 2025/05/17 3:46 p.m.•976 views

CVE-2025-47273

CVE-2025-47273 affects setuptools by a path traversal in PackageIndex prior to 78.1.1, allowing writing files to arbitrary locations with the process’s permissions and potentially enabling remote code execution in context. Affected: setuptools package (Python ecosystem). The issue is fixed in ver...

8.8CVSS7.3AI score0.01592EPSS
SaveExploits5References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/05/17 3:46 p.m.•12 views

CVE-2025-47273 setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.7CVSS7.3AI score0.01592EPSS
SaveExploits5References4
Mend
Mend
•added 2025/05/17 3:46 p.m.•26 views

CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in "PackageIndex" is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem wi...

8.8CVSS7.3AI score0.01592EPSS
SaveExploits5References10
vulnersOsv
vulnersOsv
•added 2025/05/17 3:46 p.m.•3 views

aaiopay (>=0.2.1, <=0.2.2), aaz-dev (>=3.0.0, <=4.6.0) +3959 more potentially affected by CVE-2025-47273 via setuptools (>=7.0.0, <=78.1.0)

setuptools PYPI version =7.0.0, =0.2.1, =3.0.0, =1.0.0, =0.0.1, =0.1.18, =0.0.1, =0.1.0, =0.1.0, =0.2.6, =0.0.1, =0.0.6 and more Source cves: CVE-2025-47273 Source advisory: MEND:CVE-2025-47273...

8.8CVSS6.8AI score0.01592EPSS
SaveExploits5
Debian CVE
Debian CVE
•added 2025/05/17 3:46 p.m.•11 views

CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS7.3AI score0.01592EPSS
SaveExploits5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/17 12:00 a.m.•4 views

CVE-2025-47273: Improper Limitation of a Pathname to a Restricted Directory

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS7.4AI score0.01592EPSS
SaveExploits5References1
Positive Technologies
Positive Technologies
•added 2025/05/17 12:00 a.m.•15 views

PT-2025-21795

Name of the Vulnerable Software and Affected Versions setuptools versions prior to 78.1.1 Description A path traversal vulnerability in PackageIndex was found in setuptools. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process...

9.8CVSS7.2AI score0.01592EPSS
SaveExploits5References197
CNNVD
CNNVD
•added 2025/05/17 12:00 a.m.•8 views

setuptools path traversal vulnerability

setuptools is a Python library open-sourced by PyPI. A path traversal vulnerability exists in versions of setuptools prior to 78.1.1, which stems from path traversal and could lead to remote code execution...

8.8CVSS7.2AI score0.01592EPSS
SaveExploits5References7
FreeBSD
FreeBSD
•added 2025/05/17 12:00 a.m.•16 views

py-setuptools -- Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An...

8.8CVSS7.2AI score0.01592EPSS
SaveExploits5References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/05/14 7:22 p.m.•28 views

Security Bulletin: Vulnerability in pypa/setuptools affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in pypa/setuptools has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

8.8CVSS8.3AI score0.01939EPSS
SaveExploits0Affected Software2
Tenable Nessus
Tenable Nessus
•added 2025/05/14 12:00 a.m.•19 views

Alibaba Cloud Linux 3 : 0143: python-setuptools (ALINUX3-SA-2023:0143)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0143 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-40897: Python Packaging Authority PyPA...

5.9CVSS6.8AI score0.02632EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/05/14 12:00 a.m.•11 views

Alibaba Cloud Linux 3 : 0062: python-setuptools (ALINUX3-SA-2024:0062)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0062 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-40897: Python Packaging Authority PyPA...

5.9CVSS6.8AI score0.02632EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2025/05/14 12:00 a.m.•9 views

Alibaba Cloud Linux 3 : 0273: python3.11-setuptools (ALINUX3-SA-2024:0273)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2024:0273 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2024-6345: A vulnerability in the packageindex...

8.8CVSS8.1AI score0.01939EPSS
SaveExploits0References2
Rockylinux
Rockylinux
•added 2025/05/07 7:13 p.m.•22 views

python3.12-setuptools-rust bug fix and enhancement update

An update is available for python3.12-setuptools-rust. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see t...

6.8AI score
SaveExploits0
Rockylinux
Rockylinux
•added 2025/05/07 7:12 p.m.•16 views

python3.12-setuptools-rust bug fix and enhancement update

An update is available for python3.12-setuptools-rust. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see t...

6.8AI score
SaveExploits0
osv_rlsa
osv_rlsa
•added 2025/05/07 7:11 p.m.•30 views

RLSA-2024:2987 Moderate: python27:2.7 security update

Python is an interpreted, interactive, object-oriented programming language that supports modules, classes, exceptions, high-level dynamic data types, and dynamic typing. The python27 packages provide a stable release of Python 2.7 with a number of additional utilities and database connectors for...

7.8CVSS7AI score0.05065EPSS
SaveExploits6References6
vulnersOsv
vulnersOsv
•added 2025/05/01 6:33 a.m.•3 views

actinia-core (6.0.0), aipackagewrapper (0.1.0) +59 more potentially affected by CVE-2025-47273 via setuptools (>=78.0.1, <=78.1.0)

setuptools PYPI version =78.0.1, =4.1.0, =1.4.1, =0.1.0, =0.0.20, =0.1.0, =8.6.2, =0.26.0, =8.6.2, =3.0.0.dev0, =2.5.0rc0, =2.8.1 - cx-freeze 8.1.0 and more Source cves: CVE-2025-47273 Source advisory: SNYK:PYTHON-SETUPTOOLS-9964606...

8.8CVSS6.8AI score0.01592EPSS
SaveExploits5
Rows per page
Query Builder