WID-SEC-W-2023-2256

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Python: Schwachstelle ermöglicht nicht spezifizierten Angriff

view advisory published 2023-09-03

Ein entfernter anonymer Angreifer kann eine Schwachstelle in Python ausnutzen, um einen nicht spezifizierten Angriff durchzuführen.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-41105UShigh7.5—
An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' by…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan