CVE-2018-3650 Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allows unprivileged user to bypass URI sanitization via local vector.
HighCVSS 7.8
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allows unprivileged user to bypass URI sanitization via local vector.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel distribution for python | < 2018 | 2018 |
| intel distribution for python | = 2018-update_1 | No fix listed |
| intel distribution for python | = 2018-update_2 | No fix listed |
| Intel Distribution for Python | = Before 2018 Update 2 | No fix listed |
References
- www.intel.com vendor-advisory