CVE-2021-23391
Arbitrary File Write via Archive Extraction (Zip Slip)
This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary file system through the module install functionality.
CVSS 3.1 · 7.3 High
EPSS < 1%
KEV · Not listed
Vendors
Products