ZDI-CAN-25377
HIGH 7.3
Overdue
Nov 14, 2024
Python Packaging Authority
The Python Packaging Authority maintains critical infrastructure for Python package distribution and management. This high-severity vulnerability requires local access and user interaction but can compromise confidentiality, integrity, and availability once exploited by an authenticated attacker. Security teams should monitor for patches between now and the March 2025 deadline and prioritize updates for systems that handle Python package management or dependencies.
Advisory Details
Researcher
Discovered by:
Anonymous
Reported
November 14, 2024
Deadline
March 14, 2025
398d overdue
CVSS Vector
AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H