Improper authorization in pypickle save() function
The save() function in pypickle.py has insufficient validation of file paths when the overwrite parameter is set to True, allowing potential arbitrary file overwrites that could result in data loss or security risks.
What happened
The save() function in pypickle.py has insufficient validation on file paths when the overwrite parameter is set to True, according to a vulnerability report. This could allow unintended file overwrites when the function is called with the overwrite flag enabled.
Reported impact
The vulnerability could lead to potential data loss or security risks through arbitrary file overwrites to critical files or unauthorized locations on the filesystem.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.