In breve
- CVE-2021-34363 è una vulnerabilità CRITICO (CVSS 9.1) che riguarda thefuck, the fuck (the fuck project).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.8%, superiore al 79.2% delle vulnerabilità.
- Correzione: aggiornare a 3.31 o successiva.
| Package | Affected versions | Patched versions |
|---|
| thefuck PyPI | < 3.31
| 3.31
|
| the fuck | < 3.31
| 3.31
|
Description
The thefuck (aka The Fuck) is app that corrects errors in previous console commands. The Fuck python package before 3.31 allows Path Traversal that leads to arbitrary file deletion via the undo archive operation feature.
NVD description
The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free