Junglewise Threat Intelligence

CVE-2017-0359: PYSEC-2018-83 - diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.

CVE-2017-0359 · Severity: low · CVSS 3.1 · Published 2018-04-13

Vendors: PyPI.

Executive brief

diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.

Affected products

PyPI diffoscope

Related threats

PYSEC-2024-41 - diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may b