CVE-2019-14751 NLTK Vulnerable To Path Traversal
HighCVSS 7.5
EPSS 5.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi nltk(PyPI) | < 3.4.5 | 3.4.5 |
| pypi nltk(PyPI) | = 0.8 | No fix listed |
| pypi nltk(PyPI) | = 0.9 | No fix listed |
| pypi nltk(PyPI) | = 0.9.3 | No fix listed |
| pypi nltk(PyPI) | = 0.9.4 | No fix listed |
| pypi nltk(PyPI) | = 0.9.5 | No fix listed |
| pypi nltk(PyPI) | = 0.9.6 | No fix listed |
| pypi nltk(PyPI) | = 0.9.7 | No fix listed |
| pypi nltk(PyPI) | = 0.9.8 | No fix listed |
| pypi nltk(PyPI) | = 0.9.9 | No fix listed |
| pypi nltk(PyPI) | = 2.0.1 | No fix listed |
| pypi nltk(PyPI) | = 2.0.1rc1 | No fix listed |
| pypi nltk(PyPI) | = 2.0.1rc2-git | No fix listed |
| pypi nltk(PyPI) | = 2.0.1rc3 | No fix listed |
| pypi nltk(PyPI) | = 2.0.1rc4 | No fix listed |
| pypi nltk(PyPI) | = 2.0.2 | No fix listed |
| pypi nltk(PyPI) | = 2.0.3 | No fix listed |
| pypi nltk(PyPI) | = 2.0.4 | No fix listed |
| pypi nltk(PyPI) | = 2.0.5 | No fix listed |
| pypi nltk(PyPI) | = 2.0b4 | No fix listed |
| pypi nltk(PyPI) | = 2.0b5 | No fix listed |
| pypi nltk(PyPI) | = 2.0b6 | No fix listed |
| pypi nltk(PyPI) | = 2.0b7 | No fix listed |
| pypi nltk(PyPI) | = 2.0b8 | No fix listed |
| pypi nltk(PyPI) | = 2.0b9 | No fix listed |
Show 25 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi nltk(PyPI) | = 3.0.0 | No fix listed |
| pypi nltk(PyPI) | = 3.0.0b1 | No fix listed |
| pypi nltk(PyPI) | = 3.0.0b2 | No fix listed |
| pypi nltk(PyPI) | = 3.0.1 | No fix listed |
| pypi nltk(PyPI) | = 3.0.2 | No fix listed |
| pypi nltk(PyPI) | = 3.0.3 | No fix listed |
| pypi nltk(PyPI) | = 3.0.4 | No fix listed |
| pypi nltk(PyPI) | = 3.0.5 | No fix listed |
| pypi nltk(PyPI) | = 3.1 | No fix listed |
| pypi nltk(PyPI) | = 3.2 | No fix listed |
| pypi nltk(PyPI) | = 3.2.1 | No fix listed |
| pypi nltk(PyPI) | = 3.2.2 | No fix listed |
| pypi nltk(PyPI) | = 3.2.3 | No fix listed |
| pypi nltk(PyPI) | = 3.2.4 | No fix listed |
| pypi nltk(PyPI) | = 3.2.5 | No fix listed |
| pypi nltk(PyPI) | = 3.3 | No fix listed |
| pypi nltk(PyPI) | = 3.4 | No fix listed |
| pypi nltk(PyPI) | = 3.4.1 | No fix listed |
| pypi nltk(PyPI) | = 3.4.2 | No fix listed |
| pypi nltk(PyPI) | = 3.4.3 | No fix listed |
| pypi nltk(PyPI) | = 3.4.4 | No fix listed |
| debian/nltk(Debian:12) | < 3.4.5-1 | 3.4.5-1 |
| debian/nltk(Debian:13) | < 3.4.5-1 | 3.4.5-1 |
| debian/nltk(Debian:14) | < 3.4.5-1 | 3.4.5-1 |
| nltk | < 3.4.5 | 3.4.5 |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com vendor-advisory
- github.com exploit patch third-party-advisory
- github.com product
- github.com release-notes
- github.com
- lists.fedoraproject.org
- lists.fedoraproject.org
- salvatoresecurity.com exploit patch third-party-advisory
- openSUSE-SU-2020:0436 vendor-advisory
- openSUSE-SU-2020:0440 vendor-advisory
- Debian Security Tracker CVE-2019-14751 vendor-advisory
- FEDORA-2020-0f785235bb vendor-advisory
- FEDORA-2020-1b90085f8d vendor-advisory
- bugs.debian.org issue-tracking