Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Python Untrusted Search Path Vulnerability - CVE-2023-41105 - Vulnerability Database
Python

Python Untrusted Search Path Vulnerability - CVE-2023-41105

High
Reference: CVE-2023-41105
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-41105
Title: Python Untrusted Search Path Vulnerability
Overview:

An issue was discovered in Python 3.11 through 3.11.4. If a path containing 39039 bytes is passed to os.path.normpath() the path will be truncated unexpectedly at the first 39039 byte. There are plausible cases in which an application would have rejected a filename for security reasons in Python 3.10.x or earlier but that filename is no longer rejected in Python 3.11.x.