CVE-2018-3650

2018-08-0115:00:00

intel

www.cve.org

AI Score

7.5

Confidence

High

EPSS

Percentile

12.6%

JSON

Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allows unprivileged user to bypass URI sanitization via local vector.

CNA Affected

[
  {
    "product": "Intel Distribution for Python",
    "vendor": "Intel Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Before 2018 Update 2"
      }
    ]
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00129.html