CVE-2020-15141 LOW

CVE-2020-15141: Path Traversal in openapi-python-client

Vendor Triaxtec

Product openapi-python-client

Weakness CWE-22 · Path traversal

Published August 14, 2020

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

3.0/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality None

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N

What the vulnerability does

Description

In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk.

Key dates

Disclosure timeline

August 14, 2020 CVE published

August 4, 2024 Record updated