CVE:CVE-2019-20916
CNNVD:CNNVD-202009-303
Python是Python基金会的一套开源的、面向对象的程序设计语言。该语言具有可扩展、支持模块和包、支持多种平台等特点。
Python pip 19.2之前版本中存在路径遍历漏洞。攻击者借助该漏洞可以进行目录遍历。
solution:Upgrade pypa pip to a higher version than 19.2,and avoid the version (,19.2); Upgrade opensuse leap to a higher version than 15.1,15.2,and avoid the version 15.1,15.2; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle communications_cloud_native_core_network_function_cloud_native_environment to a higher version than 1.10.0,and avoid the version 1.10.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.15.0,and avoid the version 1.15.0