PyPI/s3scanner CVE-2021-32061: medium 5.3, EPSS 1.65%

S3Scanner allows Directory Traversal

Action: Upgrade s3scanner to 2.0.2 or later.

pip install s3scanner==2.0.2

Affected

Fixed versions

Sources

• osv: GHSA-qppg-v75c-r5ff
• https://nvd.nist.gov/vuln/detail/CVE-2021-32061
• https://github.com/sa7mon/S3Scanner/issues/122
• https://github.com/sa7mon/S3Scanner/commit/fafa30a3bd35b496b3f7db9bfc35b75a8a06bcd1
• https://github.com/advisories/GHSA-qppg-v75c-r5ff
• https://github.com/pypa/advisory-database/tree/main/vulns/s3scanner/PYSEC-2021-433.yaml
• https://github.com/sa7mon/S3Scanner
• https://github.com/sa7mon/S3Scanner/releases/tag/2.0.2
• https://vuln.ryotak.me/advisories/62

CVE-2021-32061 · published 2021-11-30T22:21:36Z · modified 2024-10-26T23:02:31.113951Z · JSON