PT-2021-23115

Name of the Vulnerable Software and Affected Versions python-tuf versions prior to 0.19 Description The issue is a path traversal vulnerability that can overwrite files ending in .json anywhere on the client system when calling get one valid targetinfo. This occurs because the rolename is used to...