The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwriting the /root/.ssh/authorized_keys file. This occurs in _download_http_url in _internal/download.py.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-sqlalchemyUpgrade python2-pytest-mockUpgrade python2-pytzUpgrade python2-docutilsUpgrade python2-pyUpgrade python2-docs-infoUpgrade python2-attrsUpgrade python2-pluggyUpgrade python2-markupsafeUpgrade python2-psycopg2Upgrade python-sqlalchemy-docUpgrade python2-pysocksUpgrade python2-coverageUpgrade python2-idnaUpgrade python2-ipaddressUpgrade python2-funcsigsUpgrade python2-setuptools_scmUpgrade python2-requestsUpgrade python2-dnsUpgrade python2-PyMySQLUpgrade python2-CythonUpgrade python2-rpm-macrosUpgrade python2-psycopg2-testsUpgrade python2-docsUpgrade python2-chardetUpgrade python2-pyyamlUpgrade python-psycopg2-docUpgrade python2-mockUpgrade python2-pytestUpgrade python2-psycopg2-debug | May 4, 2022 | Sep 4, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python3-pipUpgrade python2-pipUpgrade python-pip-wheel | May 26, 2021 | Sep 4, 2020 |
| Centos_linux | — | Upgrade python2-chardetUpgrade python2-debugUpgrade python2-pluggyUpgrade python2-coverage-debuginfoUpgrade python2-jinja2Upgrade python-virtualenvUpgrade python2-bson-debuginfoUpgrade python-lxml-debugsourceUpgrade python2-psycopg2Upgrade python-psycopg2-debuginfoUpgrade python2-idnaUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-scipy-debuginfoUpgrade python2-urllib3Upgrade python-pymongo-debuginfoUpgrade python2-pyUpgrade python2-pyyamlUpgrade python-nose-docsUpgrade python2-backports-ssl_match_hostnameUpgrade python2-libsUpgrade python2-sixUpgrade python2-CythonUpgrade python2-babelUpgrade python-psycopg2-docUpgrade python2-numpy-f2pyUpgrade python-pymongo-debugsourceUpgrade python2-Cython-debuginfoUpgrade python2-pipUpgrade python2-coverageUpgrade python2-numpy-debuginfoUpgrade Cython-debugsourceUpgrade python2-noseUpgrade python2-pyyaml-debuginfoUpgrade python2-lxml-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python2-setuptools-wheelUpgrade platform-python-pipUpgrade python2-ipaddressUpgrade python2-virtualenvUpgrade python2-backportsUpgrade python2-setuptoolsUpgrade python2-pysocksUpgrade python2-pymongo-debuginfoUpgrade python2-pytest-mockUpgrade python2-lxmlUpgrade python2-bsonUpgrade python2-psycopg2-testsUpgrade scipy-debugsourceUpgrade python2-wheel-wheelUpgrade python2-requestsUpgrade python3-pip-wheelUpgrade babelUpgrade python2-testUpgrade PyYAML-debugsourceUpgrade python2-pytestUpgrade python2-rpm-macrosUpgrade python2-docs-infoUpgrade python2-dnsUpgrade python2-wheelUpgrade python2-toolsUpgrade python2-debuginfoUpgrade numpy-debugsourceUpgrade python2-pip-wheelUpgrade python2-numpyUpgrade python-coverage-debugsourceUpgrade python2-mockUpgrade python2-pygmentsUpgrade python2-develUpgrade python2-sqlalchemyUpgrade python2-docutilsUpgrade python2-psycopg2-debugUpgrade python2-debugsourceUpgrade python2-pymongo-gridfsUpgrade python2-pymongoUpgrade python2-setuptools_scmUpgrade python2-numpy-docUpgrade python2Upgrade python2-attrsUpgrade python2-markupsafeUpgrade python2-PyMySQLUpgrade python2-psycopg2-debuginfoUpgrade python2-scipyUpgrade python2-docsUpgrade python2-pytzUpgrade python2-funcsigsUpgrade python3-pipUpgrade python2-tkinterUpgrade python-sqlalchemy-doc | Nov 5, 2020 | Sep 4, 2020 |
| Debian | — | Upgrade python-pip | Sep 14, 2020 | Sep 4, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-pip-wheelUpgrade python3-pipUpgrade python-pipUpgrade python2-pip | Nov 3, 2020 | Sep 4, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python-pipUpgrade python3-pipUpgrade python-pip-wheel | Dec 1, 2020 | Sep 4, 2020 |
| Oracle Solaris | — | Upgrade library/python/pip-35 to version 19.1.1-11.4.30.0.0.88.0 on Solaris 11.4Upgrade library/python/pip-37 to version 20.2.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/python/pip-39 to version 20.2.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade library/python/pip-27 to version 20.2.4-11.4.30.0.1.88.0 on Solaris 11.4Upgrade legacy/library/python/pip-35 to version 19.1.1-11.4.30.0.0.88.0 on Solaris 11.4Upgrade library/python/pip to version 20.2.4-11.4.30.0.1.88.0 on Solaris 11.4 | Feb 17, 2021 | Sep 4, 2020 |
| Oracle_linux | — | Upgrade python2-ipaddressUpgrade python3-pip-wheelUpgrade python2-dnsUpgrade python2-funcsigsUpgrade python2-setuptools_scmUpgrade python2-sqlalchemyUpgrade python2-PyMySQLUpgrade python2-pytest-mockUpgrade python2-toolsUpgrade python2-numpyUpgrade python2-setuptoolsUpgrade python2-attrsUpgrade python2-coverageUpgrade python2-pip-wheelUpgrade babelUpgrade python-sqlalchemy-docUpgrade python2-pymongoUpgrade python2-pyUpgrade python2-pysocksUpgrade python2-numpy-docUpgrade python2-debugUpgrade python2-docutilsUpgrade python2Upgrade python2-scipyUpgrade python2-bsonUpgrade python2-testUpgrade python2-markupsafeUpgrade python2-pymongo-gridfsUpgrade python2-requestsUpgrade python2-psycopg2Upgrade python2-pluggyUpgrade python2-docsUpgrade python2-CythonUpgrade python2-idnaUpgrade python2-tkinterUpgrade python2-libsUpgrade python2-pytestUpgrade python2-develUpgrade python2-lxmlUpgrade python2-virtualenvUpgrade python2-docs-infoUpgrade python2-backportsUpgrade python2-pygmentsUpgrade python2-psycopg2-debugUpgrade python2-babelUpgrade python2-psycopg2-testsUpgrade python2-rpm-macrosUpgrade python-psycopg2-docUpgrade python2-setuptools-wheelUpgrade python2-pipUpgrade python2-pytzUpgrade python2-jinja2Upgrade python2-numpy-f2pyUpgrade python2-mockUpgrade python2-wheelUpgrade python2-sixUpgrade python-virtualenvUpgrade platform-python-pipUpgrade python3-pipUpgrade python2-wheel-wheelUpgrade python2-urllib3Upgrade python2-chardetUpgrade python2-backports-ssl_match_hostnameUpgrade python-nose-docsUpgrade python2-pyyamlUpgrade python2-nose | Nov 12, 2020 | Apr 16, 2019 |
| Redhat_linux | — | Upgrade python2-funcsigsUpgrade python2-idnaUpgrade platform-python-pipUpgrade python2-scipy-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-lxml-debuginfoUpgrade python-lxml-debugsourceUpgrade python2-pyyamlUpgrade python2-rpm-macrosUpgrade python2-numpy-debuginfoUpgrade python2-bson-debuginfoUpgrade python2-coverageUpgrade python2-sqlalchemyUpgrade python2-debugsourceUpgrade python2-noseUpgrade python2-scipyUpgrade python2-psycopg2-debug-debuginfoUpgrade python-nose-docsUpgrade python2-psycopg2Upgrade python2-dnsUpgrade python2-mockUpgrade python2-docutilsUpgrade python2-develUpgrade python-psycopg2-debuginfoUpgrade Cython-debugsourceUpgrade python-pymongo-debuginfoUpgrade python2-PyMySQLUpgrade python2-CythonUpgrade python-virtualenvUpgrade python2-Cython-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-docsUpgrade python-psycopg2-debugsourceUpgrade python2-ipaddressUpgrade python2-pipUpgrade python2-pytest-mockUpgrade python2-pluggyUpgrade python2-babelUpgrade python2-setuptools-wheelUpgrade python2-numpy-f2pyUpgrade python2-debugUpgrade python2-bsonUpgrade babelUpgrade python2-sixUpgrade python2-toolsUpgrade python2-libsUpgrade python2-numpy-docUpgrade python2-jinja2Upgrade python-coverage-debugsourceUpgrade python2-chardetUpgrade python2-pymongo-gridfsUpgrade python2-wheel-wheelUpgrade python2-debuginfoUpgrade numpy-debugsourceUpgrade python2-pysocksUpgrade python2-virtualenvUpgrade python2-markupsafeUpgrade python2Upgrade python2-requestsUpgrade python2-pyyaml-debuginfoUpgrade python2-attrsUpgrade python2-urllib3Upgrade python2-pygmentsUpgrade python2-numpyNo solution existsUpgrade python3-pipUpgrade python-pymongo-debugsourceUpgrade python2-docs-infoUpgrade python-sqlalchemy-docUpgrade python2-setuptoolsUpgrade python2-setuptools_scmUpgrade python3-pip-wheelUpgrade python2-backportsUpgrade scipy-debugsourceUpgrade python2-lxmlUpgrade python2-pytestUpgrade python2-pytzUpgrade python2-testUpgrade PyYAML-debugsourceUpgrade python2-coverage-debuginfoUpgrade python2-wheelUpgrade python2-backports-ssl_match_hostnameUpgrade python2-pyUpgrade python2-pymongoUpgrade python2-psycopg2-debugUpgrade python2-tkinterUpgrade python2-pip-wheelUpgrade python2-psycopg2-debuginfoUpgrade python-psycopg2-doc | Nov 5, 2020 | Sep 4, 2020 |
| Rocky_linux | — | Upgrade PyYAML-debugsourceUpgrade python-coverage-debugsourceUpgrade python2-CythonUpgrade python2-pymongo-gridfsUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-psycopg2-debuginfoUpgrade python2-Cython-debuginfoUpgrade python-pymongo-debugsourceUpgrade python2-coverage-debuginfoUpgrade python2-markupsafeUpgrade python2-bsonUpgrade python2-sqlalchemyUpgrade python2-psycopg2-debugUpgrade python2-pymongo-debuginfoUpgrade python2-scipyUpgrade python2-psycopg2Upgrade python-psycopg2-docUpgrade Cython-debugsourceUpgrade python2-pyyamlUpgrade python2-scipy-debuginfoUpgrade python-psycopg2-debugsourceUpgrade python-pymongo-debuginfoUpgrade python2-bson-debuginfoUpgrade scipy-debugsourceUpgrade python-psycopg2-debuginfoUpgrade python2-pymongoUpgrade python2-coverageUpgrade python2-pyyaml-debuginfoUpgrade python2-psycopg2-tests | Mar 12, 2024 | Sep 4, 2020 |
| Suse | — | Upgrade python-xmlUpgrade python39-pipUpgrade python3-setuptools-wheelUpgrade python39-setuptoolsUpgrade python3-32bitUpgrade python3-base-32bitUpgrade python2-setuptools-testUpgrade python-32bitUpgrade python-develUpgrade libpython3_4m1_0Upgrade python-pipUpgrade python3-cursesUpgrade python2-setuptoolsUpgrade python-setuptoolsUpgrade python-cursesUpgrade libpython3_6m1_0-32bitUpgrade python36Upgrade python36-baseUpgrade libpython3_6m1_0Upgrade python3-tkUpgrade python3-testsuiteUpgrade python-gdbmUpgrade python3-dbmUpgrade python3-setuptoolsUpgrade python3-doc-devhelpUpgrade python3-idleUpgrade python-docUpgrade python3-pipUpgrade python-baseUpgrade python2-pip-wheelUpgrade python3-toolsUpgrade libpython2_7-1_0-32bitUpgrade libpython2_7-1_0Upgrade python3-setuptools-testUpgrade pythonUpgrade python3-pip-wheelUpgrade python-tkUpgrade python-idleUpgrade python-doc-pdfUpgrade python3-develUpgrade libpython3_4m1_0-32bitUpgrade python-demoUpgrade python3Upgrade python2-setuptools-wheelUpgrade python-base-32bitUpgrade python3-baseUpgrade python2-pipUpgrade python3-doc | Oct 1, 2020 | Sep 4, 2020 |
| Ubuntu | — | Upgrade python-pipUpgrade python3-pip | Oct 23, 2020 | Sep 4, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub