EUVD-2024-24419

Malicious code in bioql PyPI...

CVE-2024-27178: Improper Limitation of a Pathname to a Restricted Directory

An attacker can get Remote Code Execution by overwriting files. Overwriting files is enable by falsifying file name variable. This vulnerability can be executed in combination with other vulnerabilities and difficult to execute alone. So, the CVSS score for this vulnerability alone is lower than...