CVE-2018-3650: Input Validation
First published: Wed Aug 01 2018(Updated: )
Insufficient Input Validation in Bleach module in INTEL Distribution for Python versions prior to IDP 2018 Update 2 allows unprivileged user to bypass URI sanitization via local vector.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Distribution for Python | <2018 | |
| Intel Distribution for Python | =2018-update_1 | |
| Intel Distribution for Python | =2018-update_2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2018-3650?
CVE-2018-3650 is a vulnerability in the Bleach module in Intel Distribution for Python that allows an unprivileged user to bypass URI sanitization via a local vector.
What software versions are affected by CVE-2018-3650?
CVE-2018-3650 affects Intel Distribution for Python versions prior to IDP 2018 Update 2.
What is the severity of CVE-2018-3650?
CVE-2018-3650 has a severity score of 7.8, which is considered high.
How can an unprivileged user bypass URI sanitization in Intel Distribution for Python?
An unprivileged user can bypass URI sanitization in Intel Distribution for Python by exploiting the vulnerability in the Bleach module.
Is there a fix available for CVE-2018-3650?
Yes, a fix for CVE-2018-3650 is available in Intel Distribution for Python 2018 Update 2.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/intel
- canonical/intel distribution for python
- version/intel distribution for python/2018-update_1
- version/intel distribution for python/2018-update_2