PyPI/ubi-reader CVE-2023-0591: unknown, EPSS 0.39%
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Action: Upgrade ubi-reader to 0.8.5 or later.
pip install ubi-reader==0.8.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.8.5 | - |
Fixed versions
| 0.8.5 |
Sources
- osv: PYSEC-2023-51
- https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/
- https://github.com/jrspruitt/ubi_reader/pull/57
- https://github.com/advisories/GHSA-vp2x-3mc3-3cj4
CVE-2023-0591 · published · modified · JSON