4 matches found
GHSA-C5H8-CQ4V-CVFM Improper Authentication in pip
The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...
8.2CVSS5.7AI score0.07987EPSS
SaveExploits2References10
CVE-2013-5123
The mirroring support -M, --use-mirrors in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks...
5.9CVSS6.2AI score0.07987EPSS
SaveExploits2References2
20