CVE-2021-32061
2 advisories.
PyPI/s3scanner CVE-2021-32061: medium 5.3
S3Scanner allows Directory Traversal
Action: Upgrade s3scanner to 2.0.2 or later.
pip install s3scanner==2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.2 | - |
Fixed versions
| 2.0.2 |
Sources
- osv: GHSA-qppg-v75c-r5ff
- https://nvd.nist.gov/vuln/detail/CVE-2021-32061
- https://github.com/sa7mon/S3Scanner/issues/122
- https://github.com/sa7mon/S3Scanner/commit/fafa30a3bd35b496b3f7db9bfc35b75a8a06bcd1
- https://github.com/advisories/GHSA-qppg-v75c-r5ff
- https://github.com/pypa/advisory-database/tree/main/vulns/s3scanner/PYSEC-2021-433.yaml
- https://github.com/sa7mon/S3Scanner
- https://github.com/sa7mon/S3Scanner/releases/tag/2.0.2
- https://vuln.ryotak.me/advisories/62
CVE-2021-32061 · published · modified · JSON
PyPI/s3scanner CVE-2021-32061: unknown
S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a <Key>../ substring in a ListBucketResult element.
Action: Upgrade s3scanner to 2.0.2 or later.
pip install s3scanner==2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.2 | - |
Fixed versions
| 2.0.2 |
Sources
- osv: PYSEC-2021-433
- https://github.com/sa7mon/S3Scanner/releases/tag/2.0.2
- https://github.com/sa7mon/S3Scanner/issues/122
- https://vuln.ryotak.me/advisories/62
- https://github.com/advisories/GHSA-qppg-v75c-r5ff
CVE-2021-32061 · published · modified · JSON