exploitDog

GHSA-m7r3-6mr9-xj8f

Опубликовано: 10 янв. 2023

Источник: github

Github: Не прошло ревью

Описание

workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP bomb).

workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP bomb).

Ссылки

EPSS

Процентиль: 41%

0.00195

Низкий

CVE ID

Связанные уязвимости

CVE-2023-22898

CVSS3: 6.5

ubuntu

около 3 лет назад

workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP bomb).

CVE-2023-22898

CVSS3: 6.5

nvd

около 3 лет назад

workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP bomb).

EPSS

Процентиль: 41%

0.00195

Низкий

CVE ID