Threats tagged 'bit-python-2024-0450'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.2	EPSS 0.3%	CVE-2024-0450Python · Quoted zip-bomb protection for zipfile Medium6.2EPSS 0.3%2024-12-13GCVE DatabaseCVE-2024-0450 The CPython zipfile module was vulnerable to a 'quoted-overlap' zip-bomb attack that exploited overlapping entries in zip archives to create highly compressed zip-bombs. This vulnerability affected multiple Python versions prior to fixed releases. The issue was addressed by making the zipfile module reject zip archives with overlapping entries. EPSS 0.3%Report on CVE-2024-0450 Vulnerability #bit-python-2024-0450 #bitnami	GCVE Database	2024-12-13

Page 1 of 1