CVE-2021-3572

EPSS 1.69%
Veröffentlicht 10.11.2021 18:15:09
Zuletzt bearbeitet 25.08.2026 16:28:27
CVE-Watchlists
Login
Unerledigt
Login

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

NVD 6 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Pypa ≫ Pip Version < 21.1

Oracle ≫ Agile Product Lifecycle Management Version9.3.6

Oracle ≫ Communications Cloud Native Core Network Function Cloud Native Environment Version1.10.0

Oracle ≫ Communications Cloud Native Core Network Function Cloud Native Environment Version22.1.0

Oracle ≫ Communications Cloud Native Core Policy Version1.15.0

Oracle ≫ Communications Cloud Native Core Policy Version22.1.3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.69%	0.74

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.7	2.1	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
NIST	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:N/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.oracle.com/security-alerts/cpuapr2022.html

Patch

Third Party Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

Patch

Third Party Advisory

https://security.netapp.com/advisory/ntap-20240621-0006/

https://bugzilla.redhat.com/show_bug.cgi?id=1962856

Patch

Third Party Advisory

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2021-3572