THREAT OPS › Threat News › [NVD] CVE-2024-12718 (MEDIUM 5.3) — Allows modifying some file metadata (e.g. last modified) with filter="data" or file permissions (chmod) with filter="tar" of files outside the extraction directory.
You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.
[NVD] CVE-2024-12718 (MEDIUM 5.3) — Allows modifying some file metadata (e.g. last modified) with filter="data" or file permissions (chmod) with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.
CVE-2024-12718 CVSS: 5.3 MEDIUM Published: 2025-06-03T13:15:20.183
Allows modifying some file metadata (e.g. last modified) with filter="data" or file permissions (chmod) with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter=
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- CVE-2024-12718cve
- https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filterurl
Original source: https://nvd.nist.gov/vuln/detail/CVE-2024-12718