In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name>._pth file (e.g., the python._pth file) is not affected.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade python38 | Aug 1, 2020 | Jul 31, 2020 |
| Suse | — | Upgrade python39-develUpgrade python39-baseUpgrade python39-cursesUpgrade python39-idleUpgrade python39-toolsUpgrade python39Upgrade python39-dbmUpgrade libpython3_9-1_0Upgrade python39-tk | Feb 4, 2022 | Jun 5, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub