Lucene search

Sandbox escape via various forms of "format".

🗓️ 30 Aug 2023 20:58:47Reported by GoogleType

osv🔗 osv.dev👁 15 Views

Sandbox escape via Python format method

Reporter	Title	Published	Views	Family All 11
NVD	CVE-2023-41039	30 Aug 202318:15	–	nvd
Debian CVE	CVE-2023-41039	30 Aug 202318:15	–	debiancve
Veracode	Information Disclosure	4 Sep 202306:21	–	veracode
Prion	Format string	30 Aug 202318:15	–	prion
CVE	CVE-2023-41039	30 Aug 202318:15	–	cve
Vulnrichment	CVE-2023-41039 Sandbox escape via various forms of "format" in RestrictedPython	30 Aug 202317:18	–	vulnrichment
OSV	PYSEC-2023-159	30 Aug 202318:15	–	osv
OSV	CVE-2023-41039	30 Aug 202318:15	–	osv
UbuntuCve	CVE-2023-41039	30 Aug 202300:00	–	ubuntucve
Cvelist	CVE-2023-41039 Sandbox escape via various forms of "format" in RestrictedPython	30 Aug 202317:18	–	cvelist

Source	Link
github	www.github.com/zopefoundation/RestrictedPython/security/advisories/GHSA-xjw2-6jm9-rf67
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-41039
github	www.github.com/zopefoundation/RestrictedPython/commit/4134aedcff17c977da7717693ed89ce56d54c120
github	www.github.com/zopefoundation/RestrictedPython

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Aug 2023 20:47Current

6.7Medium risk

Vulners AI Score6.7

CVSS37.7 - 8.3

EPSS0.001

SSVC