CVE-2020-15141
Low
Description
In openapi-python-client before version 0.5.3, there is a path traversal vulnerability. If a user generated a client using a maliciously crafted OpenAPI document, it is possible for generated files to be placed in arbitrary locations on disk.
SeverityLow
CVSS3.0
Exploit probability—
ProductOpenapi-python-client
PublishedAug 14, 2020
First seenAug 14, 2020
Weakness typeCWE-22Path traversal
How to fix
Update
- openapi-python-client_project openapi-python-client0.5.3 or later
- openapi-python-client0.5.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openapi-python-client_project openapi-python-client | v < 0.5.3 | 0.5.3 |
| openapi-python-clientPyPI | v < 0.5.3 | 0.5.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.