45 matches found
GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE
SummaryA path traversal vulnerability exists in GuardDog's safeextract function that allows malicious PyPI packages to write arbitrary files outside the intended extraction directory, leading to Arbitrary File Overwrite and Remote Code Execution on systems running GuardDog.CWE: CWE-22 Improper...
9.8CVSS6.2AI score0.0108EPSS
SaveExploits0References6Affected Software1
20