Kurz gesagt
- CVE-2021-34363 ist eine Schwachstelle (KRITISCH (CVSS 9.1)) in thefuck, the fuck (the fuck project).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.8%, höher als bei 79.2% aller Schwachstellen.
- Abhilfe: auf 3.31 oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| thefuck PyPI | < 3.31
| 3.31
|
| the fuck | < 3.31
| 3.31
|
Description
The thefuck (aka The Fuck) is app that corrects errors in previous console commands. The Fuck python package before 3.31 allows Path Traversal that leads to arbitrary file deletion via the undo archive operation feature.
NVD description
The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free