Описание
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 20.3.4-4 |
| esm-apps/bionic | released | 9.0.1-2.3~ubuntu1.18.04.8+esm1 |
| esm-apps/focal | not-affected | 20.0.2-5ubuntu1.5 |
| esm-apps/jammy | not-affected | 20.3.4-4 |
| esm-apps/xenial | released | 8.1.1-2ubuntu0.6+esm2 |
| esm-infra-legacy/trusty | not-affected | 8.1.1-2ubuntu0.6+esm2 |
| focal | not-affected | 20.0.2-5ubuntu1.5 |
| groovy | ignored | end of life |
| hirsute | ignored | end of life |
Показывать по
Ссылки на источники
3.5 Low
CVSS2
5.7 Medium
CVSS3
Связанные уязвимости
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.
A flaw was found in python-pip in the way it handled Unicode separator ...
3.5 Low
CVSS2
5.7 Medium
CVSS3