CVE-2019-9674

CVE Details

CVE-2019-9674

Last Update

9/25/24

NIST CVE Summary

Lib/zipfile.py in Python through 3.7.2 allows remote attackers to cause a denial of service (resource consumption) via a ZIP bomb.

Our Official Summary

Waiting on a fix from third party mongodb vendor

CVE Severity

7.5

Status

Ongoing

Affected Products & Versions

• Palette VerteX 4.4.12

Revision History

• 1.0 08/16/2024 Initial Publication
• 2.0 08/17/2024 Added palette VerteX 4.4.14 to Affected Products
• 3.0 09/25/2024 CVE remediated in Palette VerteX 4.4.18