Vulnerability Details CVE-2021-3572
A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.6%
CVSS Severity
CVSS v3 Score 5.7
CVSS v2 Score 3.5
Products affected by CVE-2021-3572
-
cpe:2.3:a:oracle:agile_plm:9.3.6
-
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.10.0
-
cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.1.0
-
cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0
-
cpe:2.3:a:oracle:communications_cloud_native_core_policy:22.1.3
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
cpe:2.3:a:pypa:pip:10.0.0
-
cpe:2.3:a:pypa:pip:10.0.1
-
-
-
-
cpe:2.3:a:pypa:pip:19.0.1
-
cpe:2.3:a:pypa:pip:19.0.2
-
cpe:2.3:a:pypa:pip:19.0.3
-
-
cpe:2.3:a:pypa:pip:19.1.1
-
-
cpe:2.3:a:pypa:pip:19.2.1
-
cpe:2.3:a:pypa:pip:19.2.2
-
cpe:2.3:a:pypa:pip:19.2.3
-
-
cpe:2.3:a:pypa:pip:19.3.1
-
-
cpe:2.3:a:pypa:pip:20.0.1
-
cpe:2.3:a:pypa:pip:20.0.2
-
-
cpe:2.3:a:pypa:pip:20.1.1
-
-
cpe:2.3:a:pypa:pip:20.2.1
-
cpe:2.3:a:pypa:pip:20.2.2
-
cpe:2.3:a:pypa:pip:20.2.3
-
cpe:2.3:a:pypa:pip:20.2.4
-
-
cpe:2.3:a:pypa:pip:20.3.1
-
cpe:2.3:a:pypa:pip:20.3.2
-
cpe:2.3:a:pypa:pip:20.3.3
-
cpe:2.3:a:pypa:pip:20.3.4
-
-
cpe:2.3:a:pypa:pip:21.0.1
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-