CVE:CVE-2021-3572
CNNVD:CNNVD-202107-978
Pip是一套用于安装和管理Python软件包的工具。
python pip 中存在输入验证错误漏洞，远程攻击者可能会利用该漏洞在存储库上安装不同的修订版。
solution:Upgrade pypa pip to a higher version than 21.1,and avoid the version (,21.1); Upgrade oracle agile_plm to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle communications_cloud_native_core_network_function_cloud_native_environment to a higher version than 1.10.0,22.1.0,and avoid the version 1.10.0,22.1.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.15.0,22.1.3,and avoid the version 1.15.0,22.1.3