CVE-2021-42771
python-babel: Relative path traversal allows attacker to load arbitrary locale files and execute arbitrary code
Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.
CVSS 3.1 · 7.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products