CVE-2021-42771

Published October 20th, 2021

View on NVD ↗

CVSS v3

7.8

HIGH

CVSS v2

7.2

HIGH

Affected

PROJECT

Description

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

python-babel/babel

The official repository for Babel, the Python Internationalization Library

GitHub

1.45K