Lucene search
K

958 matches found

RedhatCVE
RedhatCVE
added 2025/05/19 4:36 p.m.8 views

CVE-2025-47273

A flaw was found in the setuptools Python package, specifically within its PackageIndex component. This flaw allows for path traversal, enabling an attacker to write files to arbitrary locations on the filesystem. Successful exploitation could lead to data integrity compromise or system compromis...

6.5CVSS6.2AI score0.0012EPSS
Exploits4References7
OpenVAS
OpenVAS
added 2025/05/19 12:0 a.m.10 views

Huawei EulerOS: Security Advisory for python-setuptools (EulerOS-SA-2025-1459)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9AI score0.09639EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/05/19 12:0 a.m.5 views

Huawei EulerOS: Security Advisory for python-setuptools (EulerOS-SA-2025-1488)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS9AI score0.09639EPSS
Exploits0References2
PyPA
PyPA
added 2025/05/17 4:15 p.m.6 views

PYSEC-2025-49

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS8.2AI score0.0012EPSS
Exploits4References7Affected Software1
vulnersOsv
vulnersOsv
added 2025/05/17 4:15 p.m.1 views

aaiopay (>=0.2.1 <=0.2.2), abc-xml-converter (>=1.0.0 <=1.0.1) +4009 more potentially affected by CVE-2025-47273 via setuptools (>=15.2.0 <=78.1.0)

setuptools PYPI version =15.2.0, =0.2.1, =1.0.0, =0.0.1, =0.1.18, =0.0.1, =0.1.0, =0.1.0, =0.2.6, =0.0.1, =1.6.0, =3.0.1 and more Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

8.8CVSS6.7AI score0.0012EPSS
Exploits4
OSV
OSV
added 2025/05/17 4:15 p.m.1 views

DEBIAN-CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS7.9AI score0.0012EPSS
Exploits4References1
NVD
NVD
added 2025/05/17 4:15 p.m.14 views

CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS0.0012EPSS
Exploits4References5
OSV
OSV
added 2025/05/17 4:15 p.m.4 views

AZL-62438 CVE-2025-47273 affecting package setuptool 1.19.11-23

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS7.7AI score0.0012EPSS
Exploits4References1
OSV
OSV
added 2025/05/17 4:15 p.m.0 views

AZL-61943 CVE-2025-47273 affecting package python-setuptools for versions less than 69.0.3-5

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS7.7AI score0.0012EPSS
Exploits4References1
OSV
OSV
added 2025/05/17 4:15 p.m.0 views

PYSEC-2025-49

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS6.6AI score0.0012EPSS
Exploits4References5
OSV
OSV
added 2025/05/17 4:15 p.m.0 views

UBUNTU-CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS7.5AI score0.0012EPSS
Exploits4References8
UbuntuCve
UbuntuCve
added 2025/05/17 4:15 p.m.8 views

CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS7.5AI score0.0012EPSS
Exploits4References7
Debian CVE
Debian CVE
added 2025/05/17 3:46 p.m.5 views

CVE-2025-47273

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.8CVSS7.9AI score0.0012EPSS
Exploits4
CVE
CVE
added 2025/05/17 3:46 p.m.685 views

CVE-2025-47273

CVE-2025-47273 affects setuptools by a path traversal in PackageIndex prior to 78.1.1, allowing writing files to arbitrary locations with the process’s permissions and potentially enabling remote code execution in context. Affected: setuptools package (Python ecosystem). The issue is fixed in ver...

8.8CVSS7.5AI score0.0012EPSS
Exploits4References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/05/17 3:46 p.m.6 views

CVE-2025-47273 setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.7CVSS7.4AI score0.0012EPSS
Exploits4References4
Cvelist
Cvelist
added 2025/05/17 3:46 p.m.42 views

CVE-2025-47273 setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to arbitrary locations on the filesystem with...

8.7CVSS0.0012EPSS
Exploits4References4
CNNVD
CNNVD
added 2025/05/17 12:0 a.m.1 views

setuptools 路径遍历漏洞

setuptools is a Python library open-sourced by PyPI. A path traversal vulnerability exists in versions of setuptools prior to 78.1.1, which stems from path traversal and could lead to remote code execution...

8.8CVSS7.7AI score0.0012EPSS
Exploits4References7
Positive Technologies
Positive Technologies
added 2025/05/17 12:0 a.m.2 views

PT-2025-21795

Name of the Vulnerable Software and Affected Versions setuptools versions prior to 78.1.1 Description A path traversal vulnerability in PackageIndex was found in setuptools. An attacker would be allowed to write files to arbitrary locations on the filesystem with the permissions of the process...

9CVSS8.3AI score0.09639EPSS
Exploits8References168
FreeBSD
FreeBSD
added 2025/05/17 12:0 a.m.4 views

py-setuptools -- Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

https://github.com/pypa/setuptools/security/advisories/GHSA-5rjg-fvgr-3xxf reports: setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in PackageIndex is present in setuptools prior to version 78.1.1. An...

8.8CVSS7.3AI score0.0012EPSS
Exploits4References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/05/14 7:22 p.m.16 views

Security Bulletin: Vulnerability in pypa/setuptools affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in pypa/setuptools has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

8.8CVSS7.9AI score0.09639EPSS
Exploits0Affected Software2
Rows per page
Query Builder