Lucene search
Veracode Vulnerability DatabaseVERACODE:38378HistoryDec 08, 2022 - 10:56 a.m.
Directory Traversal
2022-12-0810:56:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
py7zr
directory traversal
extractall
vulnerability
file system
security
EPSS
0.01
Percentile
84.0%
py7zr is vulnerable to directory traversal. The vulnerability exists in the SevenZipFile.extractall() function of py7zr.py due to a lack of sanity checks in paths which allows an attacker to traverse through the file system.
Related
osv
osv
PYSEC-2022-42998
2022-12-06 20:15:00
CVE-2022-44900
2022-12-06 20:15:10
py7zr directory traversal vulnerability
2022-12-06 21:30:45
debian
debian
[SECURITY] [DSA 5652-1] py7zr security update
2024-04-02 18:01:49
cvelist
cvelist
CVE-2022-44900
2022-12-06 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-7030-1)
2024-09-25 00:00:00
Debian: Security Advisory (DSA-5652-1)
2024-04-04 00:00:00
githubexploit
githubexploit
Exploit for Path Traversal in Py7Zr Project Py7Zr
2023-01-21 14:52:59
prion
prion
Directory traversal
2022-12-06 20:15:00
cve
cve
CVE-2022-44900
2022-12-06 20:15:10
zdt
zdt
py7zr 0.20.0 Directory Traversal Vulnerability
2022-12-07 00:00:00
ubuntucve
ubuntucve
CVE-2022-44900
2022-12-06 00:00:00
nvd
nvd
CVE-2022-44900
2022-12-06 20:15:10
debiancve
debiancve
CVE-2022-44900
2022-12-06 20:15:10
nessus
nessus
Debian dsa-5652 : python-py7zr-doc - security update
2024-04-02 00:00:00
Ubuntu 22.04 LTS : py7zr vulnerability (USN-7030-1)
2024-09-24 00:00:00
github
github
py7zr directory traversal vulnerability
2022-12-06 21:30:45
packetstorm
packetstorm
py7zr 0.20.0 Directory Traversal
2022-12-07 00:00:00