2 matches found
CVE-2024-21542
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip due to improper destination file path validation in the extractpackagesarchive function...
8.6CVSS7.7AI score0.01135EPSS
SaveExploits0References8
CVE-2024-21542: Path Traversal: '\..\filename'
Versions of the package luigi before 3.6.0 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip due to improper destination file path validation in the extractpackagesarchive function...
8.6CVSS7.8AI score0.01135EPSS
SaveExploits0References1
20