python-internetarchive - security update
python-internetarchive - security update
- Обновитесь до 5.4.0-2~deb13u1
Опубликовано Обновлено
PatchFirst · Свежие уязвимости
Уязвимости python-internetarchive
За последние 30 дней в python-internetarchive опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 2
internetarchive is vulnerable to Directory Traversal through file downloads
internetarchive is a Python and Command-Line Interface to Archive.org In versions 5.5.0 and below, there is a directory traversal (path traversal) vulnerability in the File.download() method of the internetarchive library. The file.download() method does not properly sanitize user-supplied filenames or validate the final download path. A maliciously crafted filename could contain path traversal sequences (e.g., ../../../../windows/system32/file.txt) or illegal characters that, when processed, would cause the file to be written outside of the intended target directory. An attacker could potentially overwrite critical system files or applicatio
- Обновитесь до 5.4.0-2~deb13u1
Опубликовано Обновлено
Проверьте свой сервер
Сопоставьте установленный стек и версии со свежими базами уязвимостей.