cve/2021/CVE-2021-42556.md
2025-09-29 21:09:30 +02:00

696 B

CVE-2021-42556

Description

Rasa X before 0.42.4 allows Directory Traversal during archive extraction. In the functionality that allows a user to load a trained model archive, an attacker has arbitrary write capability within specific directories via a crafted archive file.

POC

Reference

Github

No PoCs found on GitHub currently.