Lucene search

K
osvGoogleOSV:GHSA-9JP4-68VC-R8WQ
HistoryMay 17, 2022 - 2:11 a.m.

FormEncode Access Restrictions Bypass

2022-05-1702:11:13
Google
osv.dev
2
formencode
schema.py
bypass
vulnerability
access restrictions
software

AI Score

6.7

Confidence

Low

EPSS

0.008

Percentile

81.3%

schema.py in FormEncode for Python (python-formencode) 1.0 does not apply the chained_validators feature, which allows attackers to bypass intended access restrictions via unknown vectors.

AI Score

6.7

Confidence

Low

EPSS

0.008

Percentile

81.3%