Unknown · Restrictedpython · CVE-2024-47532
**Name of the Vulnerable Software and Affected Versions**
RestrictedPython versions prior to 7.3
**Description**
A user can gain access to protected information indirectly via `AttributeError.obj` and the `string` module. This issue allows unauthorized access to potentially sensitive information.
**Recommendations**
For versions prior to 7.3, as a temporary workaround, consider removing the `string` module from `RestrictedPython.Utilities.utility builtins` if the application does not require access to it, or otherwise do not make it available in the restricted execution environment.
Update to version 7.3 to fully resolve the issue.