Detections
Analytics
CVE-2020-15801
critical
Description
In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name>._pth file (e.g., the python._pth file) is not affected.
References
https://security.netapp.com/advisory/ntap-20200731-0003/
https://github.com/python/cpython/pull/21495
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7784
https://cert-portal.siemens.com/productcert/html/ssa-398330.html