All CVEs — page 326 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
Papermerge 3.5.3 contains a directory traversal vulnerability in its document upload API that allows authenticated users to write arbitrary Python code files to the application's site-packages directory, enabling remote code execution when the Python interpreter restarts. This represents a significant security risk as it can be exploited by standard users without elevated privileges.