CVE-2018-3650
High
Description
Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allows unprivileged user to bypass URI sanitization via local vector.
SeverityHigh
CVSS7.8
Exploit probability—
ProductIntel Distribution For Python
PublishedAug 1, 2018
First seenAug 1, 2018
How to fix
Update
- intel distribution_for_python2018 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel distribution_for_python | v < 2018, 2018 | 2018 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.