Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
Python's tarfile module has a directory traversal vulnerability (CVE-2007-4559) allowing arbitrary file overwrite via malicious archives. #Python #Security https://www.pulsepatch.io/posts/cve-2007-4559-python-tarfile-directory-traversal
Post summary
The post announces Python’s tarfile module directory traversal vulnerability (CVE-2007-4559) that permits arbitrary file overwrite through malicious archives.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | python | python | - | - | - |