Security Advisory

CVE-2021-42556

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-10-22 18:36:14

Last updated 2024-08-04 03:38:49

Assigner mitre

State PUBLISHED

Description

Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to load a trained model archive, an attacker has arbitrary write capability within specific directories via a crafted archive file.

← Browse all CVEs View on cve.org ↗