7 matches found
python-libarchive Python Library <= 4.2.1 Directory Traversal (CVE-2024-55587)
The version of the python-libarchive Python library that is installed on the remote host is 4.2.1 or prior. It is, therefore, affected by a directory traversal vulnerability. python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and...
CVE-2024-55587
python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...
CVE-2024-55587
python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...
CVE-2024-55587
python-libarchive through 4.2.1 allows directory traversal to create files in extract in zip.py for ZipFile.extractall and ZipFile.extract...
CVE-2024-55587
The python-libarchive library, versions 4.2.1 and prior , is vulnerable to a directory traversal vulnerability (CWE-22) within the zip.py component. Specifically, the ZipFile.extractall and ZipFile.extract methods fail to properly sanitize file paths, allowing an attacker to use special character...
