CyberRota Analysis
AI-GeneratedThe Stanza NLP library prior to version 1.14.0 is vulnerable to a directory traversal attack due to improper validation of file paths during the extraction of downloaded model archives. This flaw allows an attacker to overwrite files outside the intended model directory, potentially leading to code execution through modified system files or configurations. Organizations using Stanza for natural language processing should prioritize upgrading to version 1.14.0 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.14.0, stanza.resources.common.unzip in stanza/resources/common.py passes downloaded model and resource archives to zipfile.ZipFile.extractall without validating member paths, and the vulnerable extraction path is reachable through stanza.download and stanza.install_corenlp. A malicious archive containing parent-directory traversal entries can write outside the intended model directory, allowing files writable by the Stanza process to be overwritten and potentially enabling code execution through modified shell configuration, SSH authorization data, Python packages, or executable scripts. This issue is fixed in version 1.14.0.