Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30301
HistoryApr 30, 2021 - 4:58 a.m.

Directory Traversal

2021-04-3004:58:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13

babel is vulnerable to directory traversal. The vulnerability allows an attacker to load arbitrary locale .dat files which contain serialized Python objects. This can potentially lead to arbitrary code execution If an attacker is able to load a malicious local .dat file through Babel.Locale().