Unrated
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal...
CVE-2021-42771
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2021-42771 py3-babel Fixed in: 2.9.1-r0
- Debian DEBIAN-CVE-2021-42771 python-babel Fixed in: 2.8.0+dfsg.1-7
Original description The description as published by the source.
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory lists.debian.org
- advisory lists.debian.org
- advisory debian.org
- patch github.com
- report tenable.com