Stanza
Monthly
Zip-slip path traversal in the Stanford NLP Stanza Python library before 1.14.0 lets a malicious model or resource archive write files outside the intended model directory, overwriting anything writable by the Stanza process and potentially achieving code execution via modified shell configuration, SSH authorized_keys, Python packages, or executable scripts. The vulnerable code path is reached when a victim runs stanza.download() or stanza.install_corenlp(); exploitation therefore requires the fetched archive to be attacker-controlled (compromised or malicious mirror, MITM of the transfer, or a victim-supplied resource URL) plus user interaction to initiate the download. Rated CVSS 3.1 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and tracked as CWE-22; unauthenticated per the PR:N vector but local and interaction-dependent, with no public exploit identified at time of analysis and a vendor patch available in 1.14.0.
Zip-slip path traversal in the Stanford NLP Stanza Python library before 1.14.0 lets a malicious model or resource archive write files outside the intended model directory, overwriting anything writable by the Stanza process and potentially achieving code execution via modified shell configuration, SSH authorized_keys, Python packages, or executable scripts. The vulnerable code path is reached when a victim runs stanza.download() or stanza.install_corenlp(); exploitation therefore requires the fetched archive to be attacker-controlled (compromised or malicious mirror, MITM of the transfer, or a victim-supplied resource URL) plus user interaction to initiate the download. Rated CVSS 3.1 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) and tracked as CWE-22; unauthenticated per the PR:N vector but local and interaction-dependent, with no public exploit identified at time of analysis and a vendor patch available in 1.14.0.