medium6.5
CVE-2023-22898
workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP b…
Impact
workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service when an attacker submits a deeply nested ZIP archive (aka ZIP bomb).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Circl | Pandora | before 1.3.1 |