9.8
CVE-2014-3539
- EPSS 2.28%
- Veröffentlicht 06.04.2018 16:29:00
- Zuletzt bearbeitet 21.11.2024 02:08:20
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
Loginbase/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Rope Project ≫ Rope SwPlatformpython Version < 0.11.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.28% | 0.844 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|