Skip to content
Threat Feed

Product

Pyload-Ng (<= 0.5.0b3.dev99)

1 brief RSS
high advisory

PyLoad Path Traversal Vulnerability in set_package_data

PyLoad versions 0.5.0b3.dev99 and earlier are vulnerable to a path traversal vulnerability in the `set_package_data` function, allowing attackers to write files to arbitrary directories with the privileges of the PyLoad process.

pyload-ng path-traversal web-application pyload
2r 1t