Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21352
HistoryAug 21, 2019 - 12:25 p.m.

Directory Traversal

2019-08-2112:25:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.006 Low

EPSS

Percentile

78.9%

Natural Language Toolkit (NLTK) is vulnerable to directory traversal. Remote attackers could write arbitrary files using the ../ (dot dot slash) characters in an NLTK package (ZIP archive) which is mishandled during extraction.

CPENameOperatorVersion
nltkle3.4.4