| Package | Affected versions | Patched versions |
|---|---|---|
| rasa x | < 0.42.4 | 0.42.4 |
Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to load a trained model archive, an attacker has arbitrary write capability within specific directories via a crafted archive file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free