CVE-2019-15520

comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory...

CVE-2019-15520

CVE-2019-15520 concerns the Python-based dependency manager comelz Quark . Multiple connected sources confirm a vulnerability in versions of Quark before 2019-03-26 that allows a directory traversal to locations outside the project directory. The root cause is a path traversal flaw in Quark’s han...