CVE-2020-15801

Name of the Vulnerable Software and Affected Versions Python version 3.8.4

Description The issue is related to the python38. pth file, where sys.path restrictions are ignored, allowing code to be loaded from arbitrary locations. This could potentially enable a remote attacker to execute arbitrary code. The vulnerability is associated with the ignoring of sys.path restrictions specified in the python38. pth file.

Recommendations For Python version 3.8.4, consider restricting access to the python38. pth file to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the python38. pth file for specifying sys.path restrictions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.