CVE-2024-47532
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Sep 30, 2024
Updated: Nov 15, 2024
CWE ID 200
Summary
CVE-2024-47532 is a vulnerability affecting RestrictedPython, a restricted execution environment for Python used to run untrusted code. An attacker can manipulate the AttributeError.obj and the string module to gain indirect access to protected information. The issue will be resolved in version 7.3. As a temporary measure, applications without a requirement for the string module can remove it from RestrictedPython.Utilities.utility_builtins or prevent its availability in the restricted execution environment.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Zope