Lucene search

K
redhatcveRedhat.comRH:CVE-2021-20095
HistoryApr 30, 2021 - 5:49 p.m.

CVE-2021-20095

2021-04-3017:49:20
redhat.com
access.redhat.com
20
python-babel
path traversal
locale data
vulnerability
data confidentiality
integrity
service availability

EPSS

0.002

Percentile

64.3%

A flaw was found in python-babel. A path traversal vulnerability was found in how locale data files are checked and loaded within python-babel, allowing a local attacker to trick an application that uses python-babel to load a file outside of the intended locale directory. The highest threat from this vulnerability is to data confidentiality and integrity as well as service availability.