PyPI: omero-web

CVE-2017-1000438

Safety vulnerability ID: SFTY-20180102-63425

Safety legacy ID: pyup.io-66895

In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data.

PythonPyPINVDNVD
Created at: Jul 5, 2026Updated at: Jul 5, 2026

Overview

In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data.

Advisory

In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the underlying filesystem, then manipulate the user's data.

Affected Package

Affecting omero-web package, versions<5.3.4

Also affects

---

How to Fix

Upgradeomero-webto5.5.dev1or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

Safety

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more