python-internetarchive - security update
python-internetarchive - security update
- Mettez à jour vers 3.3.0-2~deb12u1
Publication Mise à jour
PatchFirst · Vulnérabilités récentes
Vulnérabilités de python-internetarchive
Vulnérabilité publiée pour python-internetarchive au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 2
internetarchive is vulnerable to Directory Traversal through file downloads
internetarchive is a Python and Command-Line Interface to Archive.org In versions 5.5.0 and below, there is a directory traversal (path traversal) vulnerability in the File.download() method of the internetarchive library. The file.download() method does not properly sanitize user-supplied filenames or validate the final download path. A maliciously crafted filename could contain path traversal sequences (e.g., ../../../../windows/system32/file.txt) or illegal characters that, when processed, would cause the file to be written outside of the intended target directory. An attacker could potentially overwrite critical system files or applicatio
- Mettez à jour vers 3.3.0-2~deb12u1
Publication Mise à jour
Vérifiez votre serveur
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.