Vulnerabilities

TI-2024-31821 CVE-2024-47532 · GHSA-5rfv-66g4-jr8h

RestrictedPython information leakage via `AttributeError.obj` and the `string` module

MEDIUM 45

RestrictedPython is a restricted execution environment for Python to run untrusted code.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00716 Published 2024-09-30 Fixed in 7.3 CWE-200

TI-2023-21665 CVE-2023-41039 · GHSA-xjw2-6jm9-rf67

Sandbox escape via various forms of "format" in RestrictedPython

LOW 39

RestrictedPython is a restricted execution environment for Python to run untrusted code.

CVSS 3.1HIGH 8.3 Network High privileges User interaction EPSS 0.00683 Published 2023-08-30 Fixed in 5.4, 6.1 +1 CWE-74

TI-2023-18901 CVE-2023-37271 · GHSA-wqc8-x2pr-7jqh

RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape

MEDIUM 44

RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00847 Published 2023-07-11 Fixed in 6.1, 5.3 CWE-913

Vulnerabilities

Filters

RestrictedPython information leakage via `AttributeError.obj` and the `string` module

Sandbox escape via various forms of "format" in RestrictedPython

RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape