A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2022-12-06T00:00:00
Updated: 2024-08-03T14:01:31.332Z
Reserved: 2022-11-07T00:00:00
Link: CVE-2022-44900
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-12-06T20:15:10.560
Modified: 2024-11-21T07:28:31.730
Link: CVE-2022-44900
Redhat
No data.