Vulnerability Details CVE-2020-15801
In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name>._pth file (e.g., the python._pth file) is not affected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2020-15801
-
cpe:2.3:a:netapp:max_data:-
-
cpe:2.3:a:python:python:3.7.0
-
cpe:2.3:a:python:python:3.7.1
-
cpe:2.3:a:python:python:3.7.2
-
cpe:2.3:a:python:python:3.7.3
-
cpe:2.3:a:python:python:3.7.4
-
cpe:2.3:a:python:python:3.7.5
-
cpe:2.3:a:python:python:3.7.6
-
cpe:2.3:a:python:python:3.7.7
-
cpe:2.3:a:python:python:3.7.8
-
cpe:2.3:a:python:python:3.8.0
-
cpe:2.3:a:python:python:3.8.0b1
-
cpe:2.3:a:python:python:3.8.1
-
cpe:2.3:a:python:python:3.8.2
-
cpe:2.3:a:python:python:3.8.3
-
cpe:2.3:a:python:python:3.8.4
-
cpe:2.3:o:microsoft:windows:-