Executive brief
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file.
Affected products
- PyPI py7zr
Junglewise Threat Intelligence
CVE-2022-44900: PYSEC-2022-42998 - A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attacke
CVE-2022-44900 · Severity: low · CVSS 3.1 · Published 2022-12-06
Technologies: py7zr (PyPI). Vendors: PyPI.