CVE-2024-47532

Name of the Vulnerable Software and Affected Versions RestrictedPython versions prior to 7.3

Description A user can gain access to protected information indirectly via AttributeError.obj and the string module. This issue allows unauthorized access to potentially sensitive information.

Recommendations For versions prior to 7.3, as a temporary workaround, consider removing the string module from RestrictedPython.Utilities.utility builtins if the application does not require access to it, or otherwise do not make it available in the restricted execution environment. Update to version 7.3 to fully resolve the issue.