1189 matches found
PYSEC-2021-421
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...
01os (=0.0.14), 3-04-2025-ttm (=0.1.0) +13125 more potentially affected by CVE-2021-42771 via babel (>=1.0.0 <=2.9.0)
babel PYPI version =1.0.0, =0.1.0.dev384, =0.1.0, =1.0.3, =1.0.0, =0.0.3, =0.1.0, =1.0.3, =0.1.0, =0.1.2 and more Source cves: CVE-2021-42771 Source advisory: OSV:PYSEC-2021-421...
CVE-2021-42771
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...
UBUNTU-CVE-2021-42771
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...
PYSEC-2021-421
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...
CVE-2021-42771
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...
CVE-2021-42771
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files containing serialized Python objects via directory traversal, leading to code execution...
CVE-2021-42771
CVE-2021-42771 affects Babel.Locale in the Babel project; versions prior to 2.9.1 are vulnerable. The issue arises from directory traversal that allows loading arbitrary locale .dat files containing serialized Python objects, enabling code execution. Public advisories (e.g., Debian LTS, AlmaLinux...
Babel 路径遍历漏洞
Babel is a multilingual support module used in content management systems. A security vulnerability exists in Babel due to a network system or product not properly filtering special characters, commands, etc. from external input data during the construction of executable operating system commands...
Huawei EulerOS: Security Advisory for babel (EulerOS-SA-2021-2353)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP2 : babel (EulerOS-SA-2021-2353)
According to the version of the babel packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Relative Path Traversal in Babel 2.9.0 allows an attacker to load arbitrary locale files on disk and execute arbitrary code.CVE-2021-20095 Note that...
EulerOS 2.0 SP5 : babel (EulerOS-SA-2021-2319)
According to the version of the babel packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel,...
Huawei EulerOS: Security Advisory for babel (EulerOS-SA-2021-2319)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
babel-bahr.blog4ever.com Cross Site Scripting vulnerability OBB-2127506
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code
A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...
python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code
A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...
python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code
A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...
python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code
A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from...
RHEL 7 : rh-python38 (RHSA-2021:3254)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3254 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
Huawei EulerOS: Security Advisory for babel (EulerOS-SA-2021-2261)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...