En bref
- CVE-2021-34363 est une vulnérabilité CRITIQUE (CVSS 9.1) touchant thefuck, the fuck (the fuck project).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.8%, plus élevée que 79.2% des vulnérabilités.
- Correctif : mettre à jour vers 3.31 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| thefuck PyPI | < 3.31
| 3.31
|
| the fuck | < 3.31
| 3.31
|
Description
The thefuck (aka The Fuck) is app that corrects errors in previous console commands. The Fuck python package before 3.31 allows Path Traversal that leads to arbitrary file deletion via the undo archive operation feature.
NVD description
The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free