CVE-2021-42771

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading…

published October 20, 2021

CVSS
—
EPSS
1%
Percentile
55.2
In the wild
Unconfirmed
What it is

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00770 · 55.2th percentile
Published
2021-10-20T20:05Z
EPSS history
Timeline
  • 20 OCT 20:05Z
    Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading…
    cvelistv5