Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2025/07/07 4:21 p.m.9 views

cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

A flaw was found in the Python tarfile module. This vulnerability allows attackers to bypass extraction filters, enabling symlink targets to escape the destination directory and allowing unauthorized modification of file metadata via the use of TarFile.extract or TarFile.extractall with the filte...

7.5CVSS6.6AI score0.01149EPSS
SaveExploits7References10
Rows per page
Query Builder