PT-2024-40186 · Python · Python

Published 2024-03-15 · Updated 2024-03-15

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Python versions prior to 0.4.*

Description: The issue affects users who do not want tracebacks included in their logs when errors occur in their code. If a user's code inadvertently includes sensitive information in a traceback and a malicious entity gains access to their log stream, it could create a problem.

Recommendations: For versions prior to 0.4., upgrade to version 0.4. to resolve the issue. As a temporary workaround, consider restricting access to log streams to minimize the risk of sensitive information disclosure.

Fix

Weakness Enumeration

CWE-453

Related Identifiers

GHSA-879P-8GW4-MCPW

Affected Products

Python

References · 3

• https://osv.dev/vulnerability/GHSA-879p-8gw4-mcpw · Vendor Advisory
• https://github.com/dan1hc/fgr/security/advisories/GHSA-879p-8gw4-mcpw · Note
• https://github.com/dan1hc/fgr · Note