CVE-2007-4559
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
Directory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive, a related issue to CVE-2001-1267.
Affected Platforms (CPE)
📦
Python
Python
< 3.6.16📦
Python
Python
>= 3.7.0 and < 3.8.17📦
Python
Python
>= 3.9.0 and < 3.9.17📦
Python
Python
>= 3.10.0 and < 3.10.12📦
Python