CVE-2021-41131

python-tuf is a Python reference implementation of The Update Framework TUF. In both clients tuf/client and tuf/ngclient, there is a path traversal vulnerability that in the worst case can overwrite files ending in .json anywhere on the client system on a call to getonevalidtargetinfo. It occurs...

FreeBSD : The Update Framwork -- path traversal vulnerability (85d976be-93e3-11ec-aaad-14dae9d5a9d2)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 85d976be-93e3-11ec-aaad-14dae9d5a9d2 advisory. - python-tuf is a Python reference implementation of The Update Framework TUF. In both clients tuf/clie...

CVE-2021-41131

CVE-2021-41131 affects the Python reference implementation of The Update Framework (python-tuf), specifically the clients in the tuf/client and tuf/ngclient components. A path-traversal flaw allows an attacker to craft a rolename that, on calling get_one_valid_targetinfo(), can cause the overwrit...

CVE-2021-41131

python-tuf is a Python reference implementation of The Update Framework TUF. In both clients tuf/client and tuf/ngclient, there is a path traversal vulnerability that in the worst case can overwrite files ending in .json anywhere on the client system on a call to getonevalidtargetinfo. It occurs...