CVSS v3
9.1
CRITICAL
EPSS Score
33.3%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file.
A directory traversal vulnerability in the SevenZipFile.extractall() function of the python library py7zr v0.20.0 and earlier allows attackers to write arbitrary files via extracting a crafted 7z file.
Active exploitation of CVE-2022-44900 has not been confirmed. The EPSS score is 33.3%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2022-44900 has a CVSS v3 base score of 9.1 (CRITICAL severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).