Lucene search
+L

1 matches found

OSV
OSV
added 2025/12/11 1:25 a.m.12 views

CVE-2025-67720 Pyrofork has a Path Traversal in download_media Method

Pyrofork is a modern, asynchronous MTProto API framework. Versions 2.3.68 and earlier do not properly sanitize filenames received from Telegram messages in the downloadmedia method before using them in file path construction. When downloading media, if the user does not specify a custom filename...

6.5CVSS6.6AI score
SaveExploits0References4
Rows per page
Query Builder