Description
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
Remediation
References
Related Vulnerabilities
Undertow Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2017-2670)
WordPress Plugin iframe Cross-Site Scripting (3.0)
Oracle HTTP Server CVE-2010-0425 Vulnerability (CVE-2010-0425)
MySQL CVE-2024-21243 Vulnerability (CVE-2024-21243)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-3997)