CVE-2021-42771

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-42771
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-42771.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-42771
Aliases
Downstream
ALPINE (1)
ALSA (3)
AZL (1)
BELL (1)
CLEANSTART (1)
CLSA (1)
DEBIAN (1)
MINI (1)
openSUSE (5)
RHSA (5)
RLSA (3)
SUSE (5)
UBUNTU (1)
Related
ALSA (3)
openSUSE (5)
SUSE (5)
Published
2021-10-20T21:15:07Z
Modified
2026-10-20T10:55:02Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.

Database specific 
{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "range": [
                        {
                            "introduced": "10.0"
                        },
                        {
                            "last_affected": "10.0"
                        }
                    ],
                    "source": "CPE_STRING"
                }
            ],
            "vendor_product": "debian:debian_linux"
        }
    ]
}
References

Affected packages

Git / github.com/python-babel/babel

Affected ranges

Type
GIT
Repo
https://github.com/python-babel/babel
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
a99fa2474c808b51ebdabea18db871e389751559
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:pocoo:babel:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "0"
                },
                {
                    "fixed": "2.9.1"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

Affected versions

1.*
1.0
2.*
2.0
Other
dev-2a51c9b95d06
v2.*
v2.4.0
v2.5.0
v2.5.1
v2.5.2
v2.6.0
v2.7.0
v2.8.0
v2.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-42771.json"