CVE-2022-44900: Path Traversal
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-44900?
CVE-2022-44900 is a directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier.
How does CVE-2022-44900 work?
CVE-2022-44900 allows attackers to write arbitrary files by extracting a crafted 7z file.
What is the severity of CVE-2022-44900?
CVE-2022-44900 has a severity rating of 9.1 (critical).
How can I fix CVE-2022-44900?
To fix CVE-2022-44900, update py7zr to version 0.20.1 or newer.
Where can I find more information about CVE-2022-44900?
You can find more information about CVE-2022-44900 at the following references: [NVD](https://nvd.nist.gov/vuln/detail/CVE-2022-44900), [GitHub](https://github.com/miurahr/py7zr/commit/1bb43f17515c7f69673a1c88ab9cc72a7bbef406), [Packet Storm Security](http://packetstormsecurity.com/files/170127/py7zr-0.20.0-Directory-Traversal.html)