Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Dronex7070

#30173of 53,632
8.7Total CVSS
Vulnerabilities · 1
PT-2024-32646
8.7
2024-09-30
Unknown · Restrictedpython · CVE-2024-47532
**Name of the Vulnerable Software and Affected Versions** RestrictedPython versions prior to 7.3 **Description** A user can gain access to protected information indirectly via `AttributeError.obj` and the `string` module. This issue allows unauthorized access to potentially sensitive information. **Recommendations** For versions prior to 7.3, as a temporary workaround, consider removing the `string` module from `RestrictedPython.Utilities.utility builtins` if the application does not require access to it, or otherwise do not make it available in the restricted execution environment. Update to version 7.3 to fully resolve the issue.