workers/extractor.py in Pandora (aka... CVE-2023-22898

- AV AC AU C I A
发布: 2023-01-10
修订: 2023-01-13

workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP bomb).

0%
暂无可用Exp或PoC
当前有1条受影响产品信息