PT-2020-14221
CVE-2020-15141
·
تاريخ النشر
2020-08-14
·
تاريخ التحديث
2020-08-20
الوصف من
CVSS 3.1
4.1
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions
openapi-python-client versions prior to 0.5.3
Description
The issue allows for a path traversal vulnerability. If a user generates a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk.
Recommendations
For versions prior to 0.5.3, update to version 0.5.3 once it is released, as a fix is being worked on for this version.
As a temporary workaround, inspect OpenAPI documents before generating clients for them.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾