Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v8w7-8vj5-pjjm

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script.

ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script.

EPSS

Процентиль: 86%
0.03038
Низкий

Связанные уязвимости

nvd
почти 24 года назад

ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading files from the client's filesystem, which allows remote attackers to read arbitrary files via a malicious web page containing Python script.

EPSS

Процентиль: 86%
0.03038
Низкий