CVE-2020-15141CWE-22

Path Traversal in openapi-python-client

Low · published August 14, 2020

CVSS v3.1
3.0
EPSS
1%
Percentile
66.3
In the wild
Unconfirmed
What it is

In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk.

The record
Technical detail
CVSS v3.1
3.0 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01137 · 66.3th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2020-08-14T16:20Z
EPSS history
Timeline
  • 14 AUG 16:20Z
    Path Traversal in openapi-python-client
    cvelistv5