Description (CNA)
A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Artifex Software Inc. *PyMuPDF* / PyMuPDF | affected 1.26.5 before 1.26.7 |
CWE
No CWE identifiers supplied.
References
- http://github.com/pymupdf/PyMuPDF
- http://github.com/pymupdf/PyMuPDF/commit/603cafe38a183b8bab34f16d05043b4185d8d40a
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.
A flaw was found in PyMuPDF. This vulnerability, involving path traversal, allows an attacker to write arbitrary files to unintended locations on the system. The flaw is present in the embedded `get` function within the `_main_.py` file. Successful exploitation could lead to system compromise or data corruption.