Description (CNA)
A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .. (dot dot) sequence in filenames in a TAR archive.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hewlett Packard Enterprise / HPE NonStop Python 3.x | affected T0993L01^AAL and earlier |
CWE
CWE-30
References
ADP enrichment
No English description supplied.
No references supplied.