Beveiligingsadvies
CVE-2021-35958
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is that tf.keras.utils.get_file is not intended for untrusted archives