python-internetarchive - security update
python-internetarchive - security update
- Actualiza a 3.3.0-2~deb12u1
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de python-internetarchive
Vulnerabilidades publicadas para python-internetarchive en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 2
internetarchive is vulnerable to Directory Traversal through file downloads
internetarchive is a Python and Command-Line Interface to Archive.org In versions 5.5.0 and below, there is a directory traversal (path traversal) vulnerability in the File.download() method of the internetarchive library. The file.download() method does not properly sanitize user-supplied filenames or validate the final download path. A maliciously crafted filename could contain path traversal sequences (e.g., ../../../../windows/system32/file.txt) or illegal characters that, when processed, would cause the file to be written outside of the intended target directory. An attacker could potentially overwrite critical system files or applicatio
- Actualiza a 3.3.0-2~deb12u1
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.