CVE-2021-34363
Summary
| CVE | CVE-2021-34363 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2021-06-10 11:15:00 UTC |
|---|
| Updated | 2023-11-07 03:35:00 UTC |
|---|
| Description | The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| NA: Fix possible changes in files outside of working directory (#1206) · nvbn/thefuck@e343c57 · GitHub |
MISC |
github.com |
|
| [SECURITY] Fedora 35 Update: thefuck-3.32-1.fc35 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 35 Update: thefuck-3.32-1.fc35 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| Release 3.31 · nvbn/thefuck · GitHub |
MISC |
github.com |
|
| [SECURITY] Fedora 34 Update: thefuck-3.32-1.fc34 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| Advisory #48 - RyotaK's Vuln DB |
MISC |
vuln.ryotak.me |
|
| [SECURITY] Fedora 34 Update: thefuck-3.32-1.fc34 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 180492 Debian Security Update for thefuck (CVE-2021-34363)
- 282252 Fedora Security Update for thefuck (FEDORA-2022-5aeda24c24)
- 282253 Fedora Security Update for thefuck (FEDORA-2022-0f1653e269)
- 982223 Python (pip) Security Update for thefuck (GHSA-8wwf-2644-f8x4)
