Unrated
The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation"...
CVE-2021-34363
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-34363 thefuck Fixed in: 3.29-0.3
- Ubuntu UBUNTU-CVE-2021-34363 thefuck
Original description The description as published by the source.
The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory vuln.ryotak.me
- patch github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org