| Package | Affected versions | Patched versions |
|---|---|---|
| bbot | < 2.7.0 | 2.7.0 |
Various issues in bbot's unarchive.py allow a malicious site to cause bbot to write arbitrary files to arbitrary locations. This can be used to achieve Remote Code Execution (RCE).
A user who uses bbot to scan a malicious webserver may have arbitrary code executed on their system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free