GHSA-28JP-44VH-Q42H高危已审查已撤回

Duplicate Advisory: Keras keras.utils.get_file API is vulnerable to a path traversal attack

OSV 1.4.0 · github-reviewed · 修改于 2025-12-02 08:53

发布时间

2025-10-31 02:31

GitHub 审查时间

2025-11-01 01:39

NVD 发布时间

2025-10-31 01:15

源文件

advisories/github-reviewed/2025/10/GHSA-28jp-44vh-q42h/GHSA-28jp-44vh-q42h.json

该公告已于 2025-12-02 08:53 撤回

内容仅用于保留外部引用，请不要将其当作仍然有效的安全结论。

公告说明

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-hjqc-jx6g-rwp9. This link is maintained to preserve external references.

Original Description

The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter="data" feature. A remote attacker can craft a malicious tar archive containing special symlinks, which, when extracted, allows them to write arbitrary files to any location on the filesystem outside of the intended destination folder. This vulnerability is linked to the underlying Python tarfile weakness, identified as CVE-2025-4517. Note that upgrading Python to one of the versions that fix CVE-2025-4517 (e.g. Python 3.13.4) is not enough. One additionally needs to upgrade Keras to a version with the fix (Keras 3.12).

受影响的软件包

PyPI

keras

ECOSYSTEM

标识信息

别名 / CVE

无

CWE

CWE-22

软件生态

PyPI

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V4

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

原始 OSV JSON

{
  "id": "GHSA-28jp-44vh-q42h",
  "aliases": [],
  "details": "### Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-hjqc-jx6g-rwp9. This link is maintained to preserve external references.\n\n### Original Description\nThe keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack. The utility uses Python's tarfile.extractall function without the filter=\"data\" feature. A remote attacker can craft a malicious tar archive containing special symlinks, which, when extracted, allows them to write arbitrary files to any location on the filesystem outside of the intended destination folder. This vulnerability is linked to the underlying Python tarfile weakness, identified as CVE-2025-4517. Note that upgrading Python to one of the versions that fix CVE-2025-4517 (e.g. Python 3.13.4) is not enough. One additionally needs to upgrade Keras to a version with the fix (Keras 3.12).",
  "summary": "Duplicate Advisory: Keras keras.utils.get_file API is vulnerable to a path traversal attack",
  "affected": [
    {
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "3.12.0"
            }
          ]
        }
      ],
      "package": {
        "name": "keras",
        "ecosystem": "PyPI"
      }
    }
  ],
  "modified": "2025-12-02T00:53:21Z",
  "severity": [
    {
      "type": "CVSS_V4",
      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"
    }
  ],
  "published": "2025-10-30T18:31:10Z",
  "withdrawn": "2025-12-02T00:53:21Z",
  "references": [
    {
      "url": "https://github.com/keras-team/keras/security/advisories/GHSA-hjqc-jx6g-rwp9",
      "type": "WEB"
    },
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12060",
      "type": "ADVISORY"
    },
    {
      "url": "https://github.com/keras-team/keras/pull/21760",
      "type": "WEB"
    },
    {
      "url": "https://github.com/keras-team/keras/commit/47fcb397ee4caffd5a75efd1fa3067559594e951",
      "type": "WEB"
    },
    {
      "url": "https://github.com/keras-team/keras",
      "type": "PACKAGE"
    },
    {
      "url": "https://huntr.com/bounties/f94f5beb-54d8-4e6a-8bac-86d9aee103f4",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "severity": "HIGH",
    "github_reviewed": true,
    "nvd_published_at": "2025-10-30T17:15:37Z",
    "github_reviewed_at": "2025-10-31T17:39:46Z"
  }
}