by Kastro
Paper/Archive/CVE-2021-34363

CVE-2021-34363

mitre — The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archi…

EPSS 2%CVSS 9.1
critical.is priorityof 100
43
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 79.1.791 × 2015.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

References

refgithub.com/nvbn/thefuck/releases/tag/3.31refvuln.ryotak.me/advisories/48refgithub.com/nvbn/thefuck/commit/e343c577cd7da4d304b837d4a07ab4df1e023092advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MEDDLBFVRUQHPYIBJ4MFM3M4NUJUXL5advisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YA6UNQSOY6M3NJDZLS6YJXTS4WGDMEEJ